Help/advice request please.

[Adam Vande More]

On Mon, Nov 16, 2015 at 3:38 PM, Dave B <g8kbvdave at gmail.com> wrote:

> Hi.
>
> FreeBSD 9.2-RELEASE-p3
>
> Trying to figure out how to get openvpn setup, ultimately for a small
> number of
> traveling client machines (Linux and Windows) all owned by myself, for my
> own
> personal use.
>
> Is there any (in plain english) "how-to's" out there, that actually work?
>
> In particular, in regards to creating a self-signed CA (and the other
> needed)
> certificates, working at the command line.
>
> I'm falling over with the (undocumented) various user input data fields.
> For example, it's taken me a full week, to find out that my country code
> is not
> UK, or 44, but GB!
>

That's ISO thing, not a ssl thing per se.

But there is no guidance as to what the other field values should (or should
> not) be.  Such as region/state etc.
>

Using CA.pl and openssl.cnf has always seemed pretty straight-forward to me
at least as far as anything ssl is straight-forward.  CA.pl has a decent
man page and openssl.cnf has a lot of comments.  It's just a good start,
not the complete answer.

-- 
Adam