align="justify"> ......... + + + + + +
....... + + + + + + new private key to «client.key»
---- are about to be asked to enter information that will be incorporatedyour certificate request.you are about to enter is what is called a Distinguished Name or a DN.are quite a few fields but you can leave some blanksome fields there will be a default value, you enter «.», the field will be left blank.
---- Name (2 letter code) [US]: RUor Province Name (full name) [CA]: SPBName (eg, city) [SanFrancisco]: SPBName (eg, company) [ server]: companyUnit Name (eg, section) []: officeName (eg, your name or your server «s hostname) []: officeAddress [root @ localhost]: enter the following» extra 'attributesbe sent with your certificate requestchallenge password []: 123456789optional company name []: office
????? ?? ????????,??????? ????? ??? ?????? ? ???? ?????????.
??????? ???? ????? ??????? ??? ?????? ??????? ?? ????????????? ??????:
colo> . / Build-dh
??????? ???? ??? tls-??????????????:
colo> openvpn - genkey - secret keys / ta.key
????? ???? ???? ??????????? ? ???????? keys /?????????? ????????? ?????:
· ca.crt -??????? CA??????????,???? ???? ????? ? ??????? ? ???????;
· dh1024.pem -???? ????? ???????,???? ???? ????? ?????? ???????;
· server.crt -?????????? ???????,????? ?????? ???????;
· server.key -???? ???????,????? ?????? ??????? (?????????);
· office.crt, sklad.crt, mag1.crt, mag2.crt -??????????? ????????,????? ?????? ??????????????? ????????;
· office.key, sklad.key, mag1.key, mag2.key -????? ????????,????? ?????? ??????????????? ???????? (??????????);
· ta.key - TLS-????,????? ? ???????? ? ???????.
?????????????,?? ??????? ???????? ????? ca.crt, dh1024.pem, server.crt, server.key, ta.key,? ???????? ???????? ca.crt, dh1024.pem? ?? ????? ? ?????????????.
?? ???? ???????? ? ?????????? ?????? ? ???????????? ?????????,????????? ? ????????? ??????? ? ????????. ??????? ???????????????? ???? server.conf?????????? ???????????:
#???? ?? ??????? ???????? ??????
port 5000
#???????? udp
proto udp
#???????????? ??? ?????????? ? ?????
dev tun0
#????????? ???? CA
ca / ??etc / openvpn / keys / ca.crt
#????????? ???? ? ???????????? ???????
cert / etc / openvpn / keys / server.crt
#????????? ???? ? ?????? ???????
key / usr / local / etc / openvpn / keys / server.key
#????????? ???? ????? ???????
dh / usr/local/etc/openvpn/keys/dh1024.pem
#?????? IP-????? ??????? ? ????? ??????? ??????????? ????
server 10.10.200.0 255.255.255.0
...