Question : How do i create additional client key pairs?

hi experts
how do i create additional key pairs with openVPN, i have 3 pairs client1, client2 and client3.
how do i continue the build process and build client4, client5 and so on...

thanks
kajal

Answer : How do i create additional client key pairs?

Creating Additional VPN Clients

You will need a copy of three files, the certificate authority key and certificate (ca.key and ca.crt) and a .ovpn configuration file. These were created during the server-side setup of your VPN.

Open a command prompt and change directories to C:\Program Files\OpenVPN\easy-rsa. From the command prompt type the following command: init-config. It should look like this:

C:\Program Files\OpenVPN\easy-rsa>init-config

C:\Program Files\OpenVPN\easy-rsa>copy vars.bat.sample vars.bat
1 file(s) copied.

C:\Program Files\OpenVPN\easy-rsa>copy openssl.cnf.sample openssl.cnf
1 file(s) copied.

Then edit the newly created vars.bat at the bottom so that it matches your server's information.

set KEY_COUNTRY=(2 character country code)
set KEY_PROVINCE=(2 character state or province code)
set KEY_CITY=(your city or locality)
set KEY_ORG=(your company or organization name)
set KEY_EMAIL=(your organization's email address)

If you're not sure what to set these values to, open the ca.crt file, click the details tab, and then click on issuer. C=Country, S=State/Province, L=City, O=Org, and E=Email. Note: you only need to do the above for the first client you add. After that there is no need to run init-config or edit vars.bat.

Now return to the command prompt and type the following commands:

C:\Program Files\OpenVPN\easy-rsa>vars

C:\Program Files\OpenVPN\easy-rsa>clean-all
1 file(s) copied.
1 file(s) copied.

This will create a directory called C:\Program Files\OpenVPN\easy-rsa\keys. Copy the ca.crt and ca.key files into this directory.

Return to the command line and issue the following commands:

C:\Program Files\OpenVPN\easy-rsa>vars

C:\Program Files\OpenVPN\easy-rsa>build-key.bat client1 (where “client1” is a unique client name for your VPN)

Generating a 1024 bit RSA private key
..++++++
.............................................++++++
writing new private key to 'keys\client1.key'
-----

You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.

Random Solutions  
 
programming4us programming4us