Mastering OpenVPN

OpenVPN client certificates

Client certificates are generated in much the same way as the server certificate. Option 4 on the menu will create a Certificate Signing Request (CSR) and subsequently sign the CSR:

Menu Item: 4
Please enter certificate owner's name or ID.
Usual format is first initial-last name (jdoe) or
hostname of server which will use this certificate.
All lower case, numbers OK.
Owner []: client1


File names will use client1.
Please enter certificate owner's name or ID.
Usual format is first initial-last name (jdoe) or
hostname of server which will use this certificate.
All lower case, numbers OK.
Owner [client1]:
Would you like to password protect the private key (y/n): n
Generating a 2048 bit RSA private key
.....................................................................................................................................+++ ...