Tested with DD-WRT v24-sp2 (05/17/11) vpn-small - build 17084M NEWD Eko Hong Kong Side as OpenVPN server that you can freely surf ) Note: this will create a c:\Program Files\OpenVPN\config\key.txt file, you will can rename it as ta.key which is to be used in the later configuration steps.īoth server(DD-WRT) and clients ( Windows/Android/DD-WRT) need to do the corresponding configuration with this ta.key file to make connection.Ĭonfigure DD-WRT as OPENVPN server ( e.g. If you want to implement TLS authentication, which may be helpful (not proved/tested yet) to resolve the issueĬlick on "Start > Programs ->OpenVPN ->Utility-> Generate a static OpenVPN key"
Now we will find our newly-generated keys and certificates in the keys subdirectory. Always use a unique common name for each client.ħ. Remember that for each client, make sure to type the appropriate Common Name when prompted, i.e. Two other queries require positive responses, "Sign the certificate? " and "1 out of 1 certificate requests certified, commit? ". When the Common Name is queried, enter "server". In the example above, I used "OpenVPN-CA".Īs in the previous step, most parameters can be defaulted. The only parameter which must be explicitly entered is the Common Name. The final command (build-ca) will build the certificate authority (CA) certificate and key by invoking the interactive openssl command. Don't leave any of these parameters blank. Now edit the vars file (called vars.bat on Windows) and set the KEY_COUNTRY, KEY_PROVINCE, KEY_CITY, KEY_ORG, and KEY_EMAIL parameters.
Run the following batch file to copy configuration files into place (this will overwrite any preexisting vars.bat and openssl.cnf files):ģ. Tomleehk 發表於 21:48 OPENVPN 用 certificate 設定 : DD-WRT server,DD-WRT client, Windows, Android 本帖最後由 tomleehk 於 10:44 編輯
0 kommentar(er)
