Raspberry Pi as VPN server

[douglasb]

I've been trying to turn a Raspberry Pi running raspbian into a VPN server using OpenVPN & easy-rsa but both have been updated since all the guides I've found were written so I got about half way through my set up & got stuck.
Has anyone got an up to date guide or just advice?

Cheers,

Doug

[abaxas]

Where are you stuck at?

Happy to help with getting it sorted. But I always think it's better to learn than just blindly following a how-to.

[douglasb]

First I got stuck trying to find where easy-rsa had been installed, eventually found that & got a couple of keys ready, set myself up as the certificate authority then then lost track of all the client keys - they seem to have disappeared when I set up the certificate authority & now I get error messages saying it can't find the file when I try call up anything to do with what I'd been doing

[watercooled]

If you use the script to set up the CA then IIRC it wipes any existing keys stored in those folders. However the CA needs to be set up in advance in order to properly sign any client/server certificates.

After setting up the CA you'll want to use the easy-rsa script to set up a server certificate and as many client certificates as you have clients.

OpenVPN's own documentation is pretty good at explaining if you've not used it yet: https://openvpn.net/index.php/open-s...ion/howto.html

Edit: Just something to be aware of, generating DH parameters can take a VERY long time depending on size, the on-screen message isn't kidding, and it's normal. You're probably looking at over an hour for a RasPi so start it and leave it running while you're doing something else. You only have to do it once though, not every time you issue certificates.

[douglasb]

Thanks for the tips & link! I'll try again in the next couple of days & hopefully get further this time.
I know setting up the DH takes ages, sat through it before but know I know "this may take a long time" isn't an exaggeration!