goo.gl/KdSCtt
Signing certificate
Lab assignment:
– Generate RSA keypair and certificate signing request on your laptop
– Send CSR to lauri.vosandi@gmail.com
– Install one of following OpenVPN options below
– Try to compose OpenVPN configuration file based on the bits and pieces from slides
– Wait for Lauri to sign the certificate
– Verify that you got what I have via some other channel, eg ask me for MD5 checksum of the CA certifcate file
– Install signed certificate and CA certificate alongside generated RSA keypair
– Start OpenVPN
On Windows install just OpenVPN community edition
On Linux install: apt install network-manager-openvpn-gnome && systemctl restart network-manager
On Mac install Tunnelblick
On Ubuntu/Kali/Mac/whatever UNIX, replace lauri with your name in *lowercase*!
openssl genrsa -out host_key.pem 2048
openssl req -new -sha384 -subj “/CN=lauri” -key host_key.pem -out host_req.pem
# Inspection
openssl req -in host_req.pem -text -noout
openssl verify … # to check whether the certificate was correctly signed by the CA keypair
On Windows to create CSR run following in PowerShell:
NAME=your-name-goes-here
@”
[NewRequest]
Subject = “CN=$NAME”
Exportable = FALSE
KeySpec = 1
KeyUsage = 0xA0
MachineKeySet = True
ProviderType = 12
RequestType = PKCS10
ProviderName = “Microsoft RSA SChannel Cryptographic Provider”
KeyLength = 2048
“@ | Out-File req.inf
C:\Windows\system32\certreq.exe -new -f -q req.inf
