1 #!/usr/bin/bash 2 cd /etc/easy-rsa 3 easyrsa init-pki 4 easyrsa gen-req $HOSTNAME nopass 5 cp /etc/easy-rsa/pki/private/$HOSTNAME.key /etc/openvpn/server/ 6 # HMAC key with elliptic curve 7 openvpn --genkey tls-auth /etc/openvpn/server/ta.key 8 chown openvpn:network /etc/openvpn/server/ta.key
