On Thu, 02 Mar 2023 18:02:08 +0000, tincantech via Openvpn-users <openvpn-users@lists.sourceforge.net> wrote:
>Hi Bo, > >I would be interested to know the results of using EasyRSA >to upgrade from a version 2 PKI to version 3. > >It worked in all my tests but that's not really enough. > >As the author of the `upgrade`, I am happy to help you with that. > >Thanks >Richard > I put a question on the upgrade into the previous thread as a reply to you: >If you feel ill-at-ease with an unknown command like that then make a backup >of your installation and test on that first. So I have created a new "easy-rsa" dir by doing this: wget https://github.com/OpenVPN/easy-rsa/releases/download/v3.1.2/EasyRSA-3.1.2.tgz tar -xvf EasyRSA-3.1.2.tgz This gives me a new EasyRSA-3.1. subdir in parallel with the existinf easy-rsa dir. Then inside that I did: cp -r ../easy-rsa/keys ./ So now I have a *copy* of the active keys dir from version 2 inside the version 3 dir. Is this then ready to execute the upgrade command? easyrsa upgrade pki Note that the keys dir contains a whole lot of client related files as well, four files for each client (Name.3des.key, Name.crt, Name.csr and Name.key) These have been used to create the ovpn files for each client, which are stored in a "clients" subdir of easy-rsa. -- Bo Berglund Developer in Sweden _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
