in /etc/openvpn you'll have the following files:
- vpnsrv.crt - server's certificate
- vpnsrv.key - server's private key
- ca-certs.pem - approved client's ca certificates
- dh2048.pem - Diffie-Hellman Parameters
Install server certificate:
cat > /etc/openvpn/vpnsrv.crt
-----BEGIN CERTIFICATE-----
MIIDfzCCAmegAwIBAgIIE69O7+bgQ2IwDQYJKoZIhvcNAQEFBQAwTTEhMB8GA1UE
AwwYTGFiYiBBY2Nlc3NNYW5hZ2VyIENBIHQxMRswGQYDVQQKDBJSaWtzcG9
...cut...
5mmWe7aSdNOJupOQL+Sp4w967LvZmI+BzsgLdH4BiWH4yKqv1JPWV8hQ2C4tWW5O
A71Il4eLn6gO4v1XcSOhHFFe89gSMnXKnrGZP0JPe6Q7exc=
-----END CERTIFICATE-----
(press ctrl-d on empty line to mark end of input)
Install server private key:
cat > /etc/openvpn/vpnsrv.key
-----BEGIN RSA PRIVATE KEY-----
MIICWwIBAAKBgQCSHETppgF/uhAvWabcM+Khz2Q6I0JDqVB/a1ERnphBKeiXTOIn
QLz/Z+85jimUeYZovvdgHeAWmnSO17u9KKF5ega+bdIKt96+PzthExjjCkVc3BcD
...cut...
2mnBWSmzZP28YvvlIQJAc14fBRkoG4enmsFS7vkfWjcK10W5dyeJKM+Ef+DUuXeB
QQznlxv+MYaF8YjYNloPKTwdVCWx9acXxknwiUVStQ==
-----END RSA PRIVATE KEY-----
(press ctrl-d on empty line to mark end of input)
Generate Diffie-Hellman Parameters
$OPENSSL dhparam -out /etc/openvpn/dh2048.pem 2048
