Jump to content
Main menu
Main menu
move to sidebar
hide
Navigation
Main page
Recent changes
Help about MediaWiki
FUTO
Search
Search
Appearance
Create account
Log in
Personal tools
Create account
Log in
Pages for logged out editors
learn more
Contributions
Talk
Editing
Introduction to a Self Managed Life: a 13 hour & 28 minute presentation by FUTO software
(section)
Main Page
Discussion
English
Read
Edit
Edit source
View history
Tools
Tools
move to sidebar
hide
Actions
Read
Edit
Edit source
View history
General
What links here
Related changes
Special pages
Page information
Appearance
move to sidebar
hide
Warning:
You are not logged in. Your IP address will be publicly visible if you make any edits. If you
log in
or
create an account
, your edits will be attributed to your username, along with other benefits.
Anti-spam check. Do
not
fill this in!
==== 2.1 – Make a Certificate Authority ==== The Certificate Authority (CA) is what signs and verifies the server and client certificates used to establish secure connections. You don’t have to have any idea what that means to use a VPN. Here’s how we create the CA in '''pfSense''': <div class="figure"> <gallery mode="packed-hover" heights=250 widths=400 perrow=2> File:lu55028jxb9s_tmp_12971ff0.png </gallery> </div> <div class="figure"> <gallery mode="packed-hover" heights=250 widths=400 perrow=2> File:lu55028jxb9s_tmp_20129d0a.png </gallery> </div> <div class="figure"> <gallery mode="packed-hover" heights=250 widths=400 perrow=2> File:lu55028jxb9s_tmp_d4a33a40.png </gallery> </div> # '''Log into pfSense:''' # Open your browser and go to your '''pfSense''' IP address (e.g., <code>https://192.168.5.1</code> or <code>https://pfSense.home.arpa</code>). # Log in with your credentials (default: <code>admin</code> / '''pfSense''' unless changed). # '''Navigate to the Certificate Manager:''' # Go to '''System > Cert Manager''' in the top navigation menu. # '''Create a New CA:''' # Under the CAs tab, click the '''+ Add''' button to create a new Certificate Authority. # '''Fill in the CA Details:''' #* '''Descriptive Name:''' OpenVPN-CA (or any name you choose) #* '''Method:''' Create an Internal Certificate Authority #* '''Key Length:''' 4096 bits (recommended for strong security) #* '''Digest Algorithm:''' SHA-512 (for secure hashing) #* '''Lifetime (days):''' 3650 (about 10 years) #* '''Distinguished Name:''' #** '''Country Code:''' Your country’s two-letter code (e.g., US for the United States) #** '''State or Province:''' Your state or province #** '''City:''' Your city or locality #** '''Organization:''' Your organization name # '''Common Name:''' OpenVPN-CA (or another descriptive name) # '''Save the CA:''' <span id="creating-the-openvpn-server-certificate"></span>
Summary:
Please note that all contributions to FUTO may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see
FUTO:Copyrights
for details).
Do not submit copyrighted work without permission!
To protect the wiki against automated edit spam, we kindly ask you to solve the following hCaptcha:
Cancel
Editing help
(opens in new window)