Forums

Subscribe via email Subscribe via email
Subscribe via rss
Guest
or Ask a Question
Add a reply View Replies (1) →
Jonathan M. Guevarra
Jonathan M. Guevarra
Offline
Task

TA.KEY in OpenVPN

Resolved
0 votes
Good day i have a working OpenVPN in ClearOS, my task now is how can put or apply TA.KEY i dont know how to start on this thanks for the helps
In VPN
Monday, April 26 2021, 03:57 AM
Subscribe via email
Share this post:

Accepted Answer

Nick Howitt
Nick Howitt
Offline
Monday, April 26 2021, 07:29 AM - #Permalink
Resolved
0 votes
Google is your friend. Try https://openvpn.net/community-resources/hardening-openvpn-security/. I would see if I can put the key in /etc/openvpn/ssl/ The configuration foes in /etc/clients.conf, but if you put the key into /etc/openvpn/ssl/, you'd need to specify a path to it in clients.conf.

You will have a problem distributing it, but that is up to you. Currently the user can download the .ovpn config file and all their certs from the webconfig. There is no current mechanism for them to download a ta.key or to embed it into the ovpn file so each ovpn file will have to be manually edited and the key manually distributed.
The reply is currently minimized Show
Responses (1)

  • Accepted Answer

    Jonathan M. Guevarra
    Jonathan M. Guevarra
    Offline
    Tuesday, April 27 2021, 01:28 AM - #Permalink
    Resolved
    0 votes
    Nick Howitt wrote:

    Google is your friend. Try https://openvpn.net/community-resources/hardening-openvpn-security/. I would see if I can put the key in /etc/openvpn/ssl/ The configuration foes in /etc/clients.conf, but if you put the key into /etc/openvpn/ssl/, you'd need to specify a path to it in clients.conf.

    You will have a problem distributing it, but that is up to you. Currently the user can download the .ovpn config file and all their certs from the webconfig. There is no current mechanism for them to download a ta.key or to embed it into the ovpn file so each ovpn file will have to be manually edited and the key manually distributed.




    Thank you sir Nick
    The reply is currently minimized Show
Your Reply