2 - Raspberry PI Community Projects

Data Base Updated
$ ./build-dh
Generating DH parameters, 1024 bit long safe prime, generator 2
This is going to take a long time
..............+.......+.................................++*++*++*
The following step creates certificates for the VPN clients; one certificate is required for each
computer or person allowed to use the VPN:
$ ./build-key JoeSmith
Generating a 1024 bit RSA private key
................++++++
.............................++++++
writing new private key to 'JoeSmith.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [FR]:
State or Province Name (full name) [Loire]:
Locality Name (eg, city) [Saint-Étienne]:
Organization Name (eg, company) [Falcot Corp]:
Organizational Unit Name (eg, section) []:
Common Name (eg, your name or your server's hostname) [JoeSmith]:Joe Smith
Name []:
Email Address [admin@falcot.com]:joe@falcot.com
[…]
Now all certificates have been created, they need to be copied where appropriate: the root
certificate's public key (keys/ca.crt) will be stored on all machines (both server and clients)
as /etc/ssl/certs/Falcot_CA.crt. The server's certificate is installed only on the server
(keys/vpn.falcot.com.crt goes to /etc/ssl/vpn.falcot.com.crt, and keys/vpn.falcot.
com.key goes to /etc/ssl/private/vpn.falcot.com.key with restricted permissions so that
only the administrator can read it), with the corresponding Diffie-Hellman parameters (keys/
dh1024.pem) installed to /etc/openvpn/dh1024.pem. Client certificates are installed on the
corresponding VPN client in a similar fashion.
228 The Debian Administrator's Handbook