windows下利用OpenVPN搭建VPN服务器(6)

C:\\Program Files\\OpenVPN\\easy-rsa>

生成Root CA 格式: build-ca.bat

输出: keys/ca.crt keys/ca.key

======================================================================

C:\\Program Files\\OpenVPN\\easy-rsa>build-ca.bat Loading 'screen' into random state - done Generating a 1024 bit RSA private key

................................................................................ ....++++++

....................................++++++ writing new private key to 'keys\\ca.key' -----

You are about to be asked to enter information that will be incorporated into your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. -----

Country Name (2 letter code) [CN]:

State or Province Name (full name) [Liaoning]: Locality Name (eg, city) [Shenyang]:

Organization Name (eg, company) [OpenVPN]:

Organizational Unit Name (eg, section) []:OpenVPN ORG

Common Name (eg, your name or your server's hostname) []:OpenVPN ROOTCA Email Address [elm@elm.freetcp.com]:

生成dh1024.pem文件，Server使用TLS必须使用的一个文件。 格式: build-dh.bat 输出: keys/dh1024.pem

============================================================================

C:\\Program Files\\OpenVPN\\easy-rsa>build-dh.bat Loading 'screen' into random state - done

Generating DH parameters, 1024 bit long safe prime, generator 2 This is going to take a long time

............................................................+.................+. ................................................................................ ................................................................................ ....+..................+...........................+..........................+.

.........................+............................+.+....................... ............................................+......+...+...............+........ ..+...........+............+.....................+...+.........................+ .....+..............................................................+........... ...............+....................................+.......................+... .....................................................+.......................... ..................................................+............................. ......................................+..............+.+........................ +..........................................................................+.... ................................................................+............... ......................................+...+.............................+....... ............+...........+................+...................................... .........+...........................................+.......................... ................................................................................ .+.......+....+..............+.................................................. .........................................................................+...... ..........+..................................................................... ................................................................................ ...........................+.................................................... ........+....................................................................... ...................................................+..............+.........+... ........................................+.........+...................+......... .............+.......+..........+............+................+................. ................................................................................ ................................................................................ .................................+.................................++*++*++*

C:\\Program Files\\OpenVPN\\easy-rsa>

下面开始生成Server使用的证书： 格式: build-key-server.bat

输出: keys/.crt .csr .key

================================================================================

C:\\Program Files\\OpenVPN\\easy-rsa>build-key-server.bat server01 Loading 'screen' into random state - done Generating a 1024 bit RSA private key ...............++++++ ...........++++++

writing new private key to 'keys\\server01.key' -----

You are about to be asked to enter information that will be incorporated into your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN.

There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. -----

Country Name (2 letter code) [CN]:

State or Province Name (full name) [Liaoning]: Locality Name (eg, city) [Shenyang]:

Organization Name (eg, company) [OpenVPN]:

Organizational Unit Name (eg, section) []:OpenVPN ORG

Common Name (eg, your name or your server's hostname) []:Server01 Email Address [elm@elm.freetcp.com]:

Please enter the following 'extra' attributes to be sent with your certificate request A challenge password []: An optional company name []: Using configuration from openssl.cnf Loading 'screen' into random state - done Check that the request matches the signature Signature ok

The Subject's Distinguished Name is as follows countryName :PRINTABLE:'CN'

stateOrProvinceName :PRINTABLE:'Liaoning' localityName :PRINTABLE:'Shenyang' organizationName :PRINTABLE:'OpenVPN' organizationalUnitName:PRINTABLE:'OpenVPN ORG' commonName :PRINTABLE:'Server01'

emailAddress :IA5STRING:'el …… 此处隐藏：5514字，全部文档内容请下载后查看。喜欢就下载吧 ……