Changes

<ul>  

<ul>  

  <li>Now we can start generating the certificates and keys. Begin with the '''certificate authority''' ('''CA''') - the root certificate file that will be used to sign other certificates and keys:

    <li>Now we can start generating the certificates and keys. Begin with the <b>certificate authority</b> (<b>CA</b>) - the root certificate file that will be used to sign other certificates and keys:<pre>./easyrsa build-ca nopass</pre></li>

    <li>Next, build the <b>server</b> certificate and key:<pre>./easyrsa build-server-full server nopass</pre></li>

      <pre>build-ca</pre>

    <li>Next, build certificates and keys for the <b>clients</b>:<pre>./easyrsa build-client-full Client1 nopass</pre><font size="-1"><b>Note</b>: replace <i>Client1</i> with this client's Common Name (CN). Omit "nopass" and you will be prompted to choose the client's password.</font><br><br></li>

    <li>Lastly, generate <b>Diffie Hellman parameters</b>:<pre>./easyrsa gen-dh</pre></li>

  </li>

 

  <li>Next, build the '''server''' certificate and key:

      <pre>build-key-server server</pre>

  </li>

 

  <li>Next, build certificates and keys for the '''clients''':

    <ul>

      <pre>build-key Client1</pre>

    </ul>

'''TIP''': use the same Common Name as the certificate name (Client1 in this example). This will help you differentiate different clients easier. Pick meaningful names like "toms_PC", "company_maintenance", etc. Repeat this step as many times as you need, depending on the client quantity.

  </li>

  <li>Lastly, generate '''Diffie Hellman parameters''':

<table class="nd-othertables_3">

     <ul>

      <pre>build-dh</pre>

     </ul>

  </li>

</ul>

        <td>Diffie-Hellman parameters</td>

        <td style="text-align: center;">→</td>

     <tr>

        <td>Client and Server keys</td>

        <td style="text-align: center;">→</td>

    </tr>

     <tr>

        <td>Client and Server certificates</td>

    </tr>

</table>