technovilla/easy-rsa repository overview

⁠EasyRSA v3

The best way to create a PKI for OpenVPN is to separate your CA duty from each server & client. The CA should ideally be on a secure environment (whatever that means to you.) Loss/theft of the CA key destroys the security of the entire PKI. EasyRSA is small utility program to generate CA using openssl.

⁠Usage:

docker run --rm -it -v ~/pki:/pki easy-rsa

Create an alias using following command: alias easy-rsa='docker run --rm -it -v ~/pki:/pki easy-rsa'

⁠Use alias like below:

• easy-rsa init-pki # Initialize pki directory
• easy-rsa build-ca nopass # Build ca without password
• easy-rsa gen-req servername nopass # Generate request without password
• easy-rsa sign-req server servername # Sign server certificate
• easy-rsa sign-req client clientname # Sign client certificate
• easy-rsa gen-dh # Generate DH parameters