-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi,
------- Original Message -------
On Thursday, February 23rd, 2023 at 23:20, Bo Berglund <bo.bergl...@gmail.com>
wrote:
<snip>
> I have used easy-rsa2 since I started with OpenVPN 10 years ago and I have
> made
> a script that eases the manufacture of client OVPN fiiles using the easy-rsa2
> command scripts. Currently I have 7 VPN servers in 5 locations running on
> RaspberryPi and linux boxes. All basically set up the same way and using
> easy-rsa2.
>
> They are closing in on the 10-year expiration now so I think I need to "do
> something".
>
> Given that I have the easy-rsa setup with existing crt, csr, key, 3des.key and
> pem files in the keys subdir to easy-rsa, what is the best way to convert to
> using easy-rsa3?
>
> I had a brief look at version 3 but did not understand how to use it in my own
> environment, especially how I would convert my makeclient script, so I kept
> the
> old version 2...
> I guess I have to convert to 3 now, so can I use the same keys directory as
> with
> easy-rsa2 (rather a copy)? It holds all the crypto files created except for
> the client ovpn files.
>
There is an 'upgrade' command for EasyRSA version 3
easyrsa upgrade pki
This moves your version 2 /keys folder to the required layout for version 3.
If you feel ill-at-ease with an unknown command like that then make a backup
of your installation and test on that first.
-----BEGIN PGP SIGNATURE-----
Version: ProtonMail
wsBzBAEBCAAnBQJj+A9PCRBPl5z2a5C4nRYhBAm8PURno41yecVVVU+XnPZr
kLidAAAj3AgAwDqGyfVNn37/m9jYkODHNnDovJ6wInX0FtADD5vwbKX/ruSQ
pcJnBdUF8NyvBl19ahvweJ72Sd9hrpJ6pRp/a01uJQL/BpNZBA3RQVojYdea
8PSg0asDHOrA4jm/+fMqN6QM7qgAj/ubBwEZb52q3uFHAdiqxVyMtDNMN5gF
Ut9Vc6WMXy3vFXjF+mSpiPZlnJ5Z6liK2Tyj5Isc2NzVa7psxp6dcaBWtHJU
zr39otMjQ611Fb01EEpEDi+lJS2WFoES58ztgXSZtpFXxFtvjOkv34uwhObD
LcF0C/yzeQFsk+slZR7dETV42AIy7Vg5K0+t8j3knex5GroGfGTA7g==
=CXyu
-----END PGP SIGNATURE-----
publickey - tincantech@protonmail.com - 0x09BC3D44.asc
Description: application/pgp-keys
publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig
Description: PGP signature
_______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
