changelog shortlog graph tags branches changeset files revisions annotate raw help

Mercurial > infra / scripts/easy-rsa-gen-ca.sh

changeset 371: 7dcabf3e0edc
parent: 847281f20daf
author: Richard Westhaver <ellis@rwest.io>
date: Tue, 24 Sep 2024 15:53:24 -0400
permissions: -rwxr-xr-x
description: no link in bootstrap.sh
1 #!/usr/bin/bash
2 cd /root
3 export EASYRSA=/etc/easy-rsa
4 export EASYRSA_VARS_FILE=/etc/easy-rsa/vars
5 easyrsa init-pki
6 easyrsa build-ca
7 # now copy /etc/easy-rsa/pki/ca.crt to vpn server /etc/openvpn/server/ca.crt
8 
9 # run easy-rsa-gen-server.sh
10 
11 # run easy-rsa-gen-client.sh
12 
13 # import and sign
14 
15 # delete temporary reqs
16 
17 # send signed certs back to client/server
18 
19 # chown openvpn:network /etc/openvpn/*/*.crt