From owner-freebsd-questions@freebsd.org Tue Nov 17 02:01:13 2015 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id ABA25A309A3 for ; Tue, 17 Nov 2015 02:01:13 +0000 (UTC) (envelope-from amvandemore@gmail.com) Received: from mail-wm0-x22a.google.com (mail-wm0-x22a.google.com [IPv6:2a00:1450:400c:c09::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 475A51D0A for ; Tue, 17 Nov 2015 02:01:13 +0000 (UTC) (envelope-from amvandemore@gmail.com) Received: by wmvv187 with SMTP id v187so205083433wmv.1 for ; Mon, 16 Nov 2015 18:01:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=IwEMTpOPV4WksItDj2eR5KXfVGJYUXvYjJVPtj3ba9k=; b=oaLZTMGZu5MTvV6L/ZDjm3PmEJyPYuKZKUMWgXcDtSng1CGYv9gGyLwdQ2gBrEMyK1 p5SDplq+uMek6SGuMbqVmfqr9UCTnRe6tOxeH6cNxPU+LBhyCbXNzSQafGqOvWuf2qS7 afdVGOHZjiikoZvo2X6Tw52Hqn+wNFIJFEAmeYE3DsT7svlAdYY6R2KAGkELFjVgsT2A 6homoSgVAq8KrtHlfm8LqNtZm2bWT2Bi+npx00dTWIY6DZaWBUwigArGy/j9NQujv/Jz 8qo2XkoKDttqDxuth21bF7roJPMJnLvrvO3ARtHLllBakw8LPgkjnRK0zmH+wyOpcu2D +pEQ== MIME-Version: 1.0 X-Received: by 10.194.205.9 with SMTP id lc9mr46260942wjc.120.1447725671755; Mon, 16 Nov 2015 18:01:11 -0800 (PST) Received: by 10.194.16.231 with HTTP; Mon, 16 Nov 2015 18:01:11 -0800 (PST) In-Reply-To: <564A4CE3.9663.851BBC@g8kbvdave.googlemail.com> References: <564A4CE3.9663.851BBC@g8kbvdave.googlemail.com> Date: Mon, 16 Nov 2015 20:01:11 -0600 Message-ID: Subject: Re: Help/advice request please. From: Adam Vande More To: Dave B Cc: FreeBSD Questions Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Nov 2015 02:01:13 -0000 On Mon, Nov 16, 2015 at 3:38 PM, Dave B wrote: > Hi. > > FreeBSD 9.2-RELEASE-p3 > > Trying to figure out how to get openvpn setup, ultimately for a small > number of > traveling client machines (Linux and Windows) all owned by myself, for my > own > personal use. > > Is there any (in plain english) "how-to's" out there, that actually work? > > In particular, in regards to creating a self-signed CA (and the other > needed) > certificates, working at the command line. > > I'm falling over with the (undocumented) various user input data fields. > For example, it's taken me a full week, to find out that my country code > is not > UK, or 44, but GB! > That's ISO thing, not a ssl thing per se. But there is no guidance as to what the other field values should (or should > not) be. Such as region/state etc. > Using CA.pl and openssl.cnf has always seemed pretty straight-forward to me at least as far as anything ssl is straight-forward. CA.pl has a decent man page and openssl.cnf has a lot of comments. It's just a good start, not the complete answer. -- Adam