Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

When I read these howto's

http://fedoraproject.org/wiki/Openvpn

http://library.linode.com/networking/openvpn/centos-5

on setting up an OpenVPN server, I see that only the last of the two have the step

. /etc/openvpn/easy-rsa/2.0/build-key-server server

Should that step also have been in the Fedora howto, or is it not required?

share|improve this question
add comment

2 Answers 2

up vote 3 down vote accepted

build-key-server is just a different type of key to use for OpenVPN. You could use any of the following and be ok

build-key mycert (no password protection)
build-key-pass mycert (with password protection)
build-key-pkcs12 mycert (PKCS #12 format)
build-key-server mycert (with nsCertType=server)
share|improve this answer
    
Ok, so ./build-inter mycert that Fedora have in their howto could be added your you list and therefore substitutes build-key-server? –  Sandra Sep 1 '11 at 12:32
add comment

There are multiple options for building your keys with easy-rsa. Using the "build-key-server" builds the certificate as a server-only certificate (nsCertType=server) and requires the "ns-cert-type server" to be placed in your OpenVPN configuration file.

For the most comprehensive set of instructions, always refer to the official OpenVPN documentation:

http://openvpn.net/index.php/open-source/documentation/miscellaneous/77-rsa-key-management.html

share|improve this answer
    
Excellent. I can see that it is default in the client.conf, so I'll use it =) Thanks for pointing that out. –  Sandra Sep 1 '11 at 12:52
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.