Line 2: |
Line 2: |
| | | |
| <ul> | | <ul> |
− | <li>Now we can start generating the certificates and keys. Begin with the <b>certificate authority</b> (<b>CA</b>) - the root certificate file that will be used to sign other certificates and keys: | + | <li>Now we can start generating the certificates and keys. Begin with the <b>certificate authority</b> (<b>CA</b>) - the root certificate file that will be used to sign other certificates and keys:<pre>./easyrsa build-ca nopass</pre></li> |
− | <ul>
| + | <li>Next, build the <b>server</b> certificate and key:<pre>./easyrsa build-server-full server nopass</pre></li> |
− | <pre>./easyrsa build-ca nopass</pre>
| + | <li>Next, build certificates and keys for the <b>clients</b>:<pre>./easyrsa build-client-full Client1 nopass</pre><font size="-1"><b>Note</b>: replace <i>Client1</i> with this client's Common Name (CN).</font><br><br></li> |
− | </ul>
| + | <li>Lastly, generate <b>Diffie Hellman parameters</b>:<pre>./easyrsa gen-dh</pre></li> |
− | </li>
| |
− | <li>Next, build the <b>server</b> certificate and key: | |
− | <ul>
| |
− | <pre>./easyrsa build-server-full server nopass</pre>
| |
− | </ul>
| |
− | </li>
| |
− | <li>Next, build certificates and keys for the <b>clients</b>: | |
− | <ul>
| |
− | <pre>./easyrsa build-client-full Client1 nopass</pre>
| |
− | </ul><b>Note</b>: replace 'Client1' with this client's Common Name (CN).
| |
− | </li>
| |
− | <li>Lastly, generate <b>Diffie Hellman parameters</b>: | |
− | <ul>
| |
− | <pre>./easyrsa gen-dh</pre>
| |
− | </ul>
| |
− | </li>
| |
| </ul> | | </ul> |