Book Image

OpenVPN: Building and Integrating Virtual Private Networks

Book Image

OpenVPN: Building and Integrating Virtual Private Networks

Overview of this book

OpenVPN is a powerful, open source SSL VPN application. It can secure site-to-site connections, WiFi and enterprise-scale remote connections. While being a full-featured VPN solution, OpenVPN is easy to use and does not suffer from the complexity that characterizes other IPSec VPN implementations. It uses the secure and stable TLS/SSL mechanisms for authentication and encryption. This book is an easy introduction to this popular VPN application. After introducing the basics of security and VPN, the book moves on to cover using OpenVPN, from installing it on various platforms, through configuring basic tunnels, to more advanced features, such as using the application with firewalls, routers, proxy servers, and OpenVPN scripting. While providing only necessary theoretical background, the book takes a practical approach, presenting plenty of examples.
Table of Contents (17 chapters)
OpenVPN
Credits
About the Author
About the Reviewers
Preface
Index

Distributing the Files to the VPN Partners


Again, in your keys directory you will find three new files VPN-client.csr, VPN-client.key, and VPN-client.crt, two of which need to be transferred to the VPN partner. Do you know which ones, already? The following table gives an overview of the files we have created up to now and the ones that have to be transferred to our client.

File

Location and purpose

VPN-Server.crt

Signed certificate of the VPN-Server, must be on VPN-Server

VPN-Server.key

Private RSA key of the VPN-Server, must be on VPN-Server

VPN-Server.csr

Certificate signing request of VPN-Server, can be deleted

VPN-client.crt

Signed certificate of the VPN-client, must be on VPN-client

VPN-client.key

Private RSA key of the VPN-client, must be on VPN-client

VPN-client.csr

Certificate Signing request of VPN-Client, can be deleted

ca.crt

CA certificate, must be available on both machines

ca.key

The key to the CA, must be kept only on CA; must be kept very secret

dh2048...