Template:Generating certificates and keys

Step 3: generating certificates and keys

• Now we can start generating the certificates and keys. Begin with the certificate authority (CA) - the root certificate file that will be used to sign other certificates and keys:

  ./easyrsa build-ca nopass

• Next, build the server certificate and key:

  ./easyrsa build-server-full server nopass

• Next, build certificates and keys for the clients:

  ./easyrsa build-client-full Client1 nopass

  Note: replace 'Client1' with this client's Common Name (CN).
• Lastly, generate Diffie Hellman parameters:

  ./easyrsa gen-dh