Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: No client keys are generated, but their existence is assumed #106

Open
Bel-Shazzar opened this issue Jan 3, 2025 · 1 comment
Open
Labels
State: Incomplete Further information is requested to be able to go on. Might be auto-closed if not provided.

Comments

@Bel-Shazzar
Copy link

After following the documentation for the server configuration, including generating a client certificate I had not created any client keys.

Thus in the "Simple Client Configuration" I could not point to a myclient1.key file.


Reported from: https://documentation.ubuntu.com/server/how-to/security/install-openvpn/

@cpaelzer
Copy link
Contributor

cpaelzer commented Jan 6, 2025

Hi @Bel-Shazzar ,
where we point to what is created in https://documentation.ubuntu.com/server/how-to/security/install-openvpn/#create-client-certificates we list two already:

  • pki/ca.crt
  • pki/issued/myclient1.crt

There should be a third one, which is the myclient1.key you are missing.
We should change the docs to list this file as well, in my try a while ago it was created.
It should be in the same place in the following subdir.

$ cd /etc/openvpn/easy-rsa
$ ls -laF pki/ca.crt pki/issued/myclient1.crt pki/private/myclient1.key
-rw------- 1 root root 1204 Dec 18 07:51 pki/ca.crt
-rw------- 1 root root 4500 Dec 18 07:54 pki/issued/myclient1.crt
-rw------- 1 root root 1704 Dec 18 07:54 pki/private/myclient1.key

Could you check if you got the same, if so we really only need to mention its path and to copy that file as well in https://documentation.ubuntu.com/server/how-to/security/install-openvpn/#create-client-certificates.

@cpaelzer cpaelzer added the State: Incomplete Further information is requested to be able to go on. Might be auto-closed if not provided. label Jan 6, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
State: Incomplete Further information is requested to be able to go on. Might be auto-closed if not provided.
Projects
None yet
Development

No branches or pull requests

2 participants