Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 16 Nov 2015 20:01:11 -0600
From:      Adam Vande More <amvandemore@gmail.com>
To:        Dave B <g8kbvdave@gmail.com>
Cc:        FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   Re: Help/advice request please.
Message-ID:  <CA%2BtpaK3QJNFsdUpMBSumKumhLYsE8NxrabWHiAN6pcG_GNs8dA@mail.gmail.com>
In-Reply-To: <564A4CE3.9663.851BBC@g8kbvdave.googlemail.com>
References:  <564A4CE3.9663.851BBC@g8kbvdave.googlemail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Nov 16, 2015 at 3:38 PM, Dave B <g8kbvdave@gmail.com> wrote:

> Hi.
>
> FreeBSD 9.2-RELEASE-p3
>
> Trying to figure out how to get openvpn setup, ultimately for a small
> number of
> traveling client machines (Linux and Windows) all owned by myself, for my
> own
> personal use.
>
> Is there any (in plain english) "how-to's" out there, that actually work?
>
> In particular, in regards to creating a self-signed CA (and the other
> needed)
> certificates, working at the command line.
>
> I'm falling over with the (undocumented) various user input data fields.
> For example, it's taken me a full week, to find out that my country code
> is not
> UK, or 44, but GB!
>

That's ISO thing, not a ssl thing per se.

But there is no guidance as to what the other field values should (or should
> not) be.  Such as region/state etc.
>

Using CA.pl and openssl.cnf has always seemed pretty straight-forward to me
at least as far as anything ssl is straight-forward.  CA.pl has a decent
man page and openssl.cnf has a lot of comments.  It's just a good start,
not the complete answer.

-- 
Adam



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CA%2BtpaK3QJNFsdUpMBSumKumhLYsE8NxrabWHiAN6pcG_GNs8dA>