60 lines
1.5 KiB
Plaintext
60 lines
1.5 KiB
Plaintext
# easy-rsa parameter settings
|
|
|
|
# NOTE: If you installed from an RPM,
|
|
# don't edit this file in place in
|
|
# /usr/share/openvpn/easy-rsa --
|
|
# instead, you should copy the whole
|
|
# easy-rsa directory to another location
|
|
# (such as /etc/openvpn) so that your
|
|
# edits will not be wiped out by a future
|
|
# OpenVPN package upgrade.
|
|
|
|
# This variable should point to
|
|
# the top level of the easy-rsa
|
|
# tree.
|
|
## export D=`pwd`
|
|
BASE_DIR=/etc/openvpn
|
|
export D=${BASE_DIR}/easy-rsa
|
|
|
|
# This variable should point to
|
|
# the openssl.cnf file included
|
|
# with easy-rsa.
|
|
export KEY_CONFIG=$D/openssl.cnf
|
|
|
|
# Edit this variable to point to
|
|
# your soon-to-be-created key
|
|
# directory.
|
|
#
|
|
# WARNING: clean-all will do
|
|
# a rm -rf on this directory
|
|
# so make sure you define
|
|
# it correctly!
|
|
## export KEY_DIR=$D/keys
|
|
export KEY_DIR=${BASE_DIR}/keys
|
|
|
|
# Issue rm -rf warning
|
|
echo NOTE: when you run ./clean-all, I will be doing a rm -rf on $KEY_DIR
|
|
|
|
# Increase this to 2048 if you
|
|
# are paranoid. This will slow
|
|
# down TLS negotiation performance
|
|
# as well as the one-time DH parms
|
|
# generation process.
|
|
export KEY_SIZE=1024
|
|
|
|
# These are the default values for fields
|
|
# which will be placed in the certificate.
|
|
# Don't leave any of these fields blank.
|
|
export KEY_COUNTRY=KG
|
|
export KEY_PROVINCE=NA
|
|
export KEY_CITY=BISHKEK
|
|
export KEY_ORG="OpenVPN-TEST"
|
|
export KEY_EMAIL="me@myhost.mydomain"
|
|
|
|
export KEY_COUNTRY=DE
|
|
export KEY_PROVINCE=Berlin
|
|
export KEY_CITY=Berlin
|
|
export KEY_ORG="o.open"
|
|
export KEY_ORG_UN="network services"
|
|
export KEY_EMAIL="argus@oopen.de"
|