Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-06 Thread Bo Berglund
On Sun, 05 Mar 2023 23:29:14 +, tincantech via Openvpn-users wrote: >Thank you for your patience and determination! >It has been invaluable to solving this issue. Glad to be able to contribute some to the OpenVPN project! I have used it since about 2012 as a way to hook up my different locat

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-06 Thread Bo Berglund
On Mon, 06 Mar 2023 12:55:05 +0100, Bo Berglund wrote: >And I guess now $KEY_DIR needs to be changed to a set of different dirs >depending on the type of file being worked on... I ran some manual tests on the converted easyrsa3 dir and it seems like one is not given the ability to enter client s

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-06 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, To build private keys without passwords, either: - easyrsa build-client-full cli-name nopass (The original method) or - easyrsa --nopass build-client-full cli-name (The new method) Option --nopass can be either --nopass or --no-pass All will rem

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-06 Thread Bo Berglund
On Mon, 06 Mar 2023 16:31:57 +, tincantech via Openvpn-users wrote: >Hi, > >To build private keys without passwords, either: >- easyrsa build-client-full cli-name nopass (The original method) >or >- easyrsa --nopass build-client-full cli-name (The new method) >Option --nopass can be either --

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-06 Thread Bo Berglund
On Mon, 06 Mar 2023 18:35:52 +0100, Bo Berglund wrote: >TestClient3 should NOT have a password in there... Typo: TestClient3 *should* have a password whereas the 1 and 2 should not... But all ask for it. Is there awy to check if a file is password protected? -- Bo Berglund Developer in Swede

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-06 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, Only private keys can be encrypted by openssl with a password. Certificates are basically public keys, therefore, password protecting them is completely pointless. EasyRSA does not offer any form of subsequent encryption. You can encrypt any fi

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-06 Thread Bo Berglund
On Mon, 06 Mar 2023 18:58:36 +, tincantech via Openvpn-users wrote: >Only private keys can be encrypted by openssl with a password. >Certificates are basically public keys, therefore, password >protecting them is completely pointless. EasyRSA does not >offer any form of subsequent encryption.

Re: [Openvpn-users] Easy-rsa 3 config questions

2023-03-06 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, --- Original Message --- On Monday, March 6th, 2023 at 20:42, Bo Berglund wrote: > Question: > - > I will call easy-rsa from within my script and I want to enter the password > as a > variable in the script and pass it to ea