Our Classes
Enter alright so we now have our server key now we need to create two more keys one for the Windows desktop and one for the Android smartphone so now we use a similar command which is build key and again we need to provide the common name so I’m going to call this one let’s say desktop client so again I’m going to identify this Windows computer with a common name of desktop client press Enter and again just like before we’ve got a bunch of questions period enter period enter again when you get to common name it will have listed what you typed in earlier as the default which is good so just press enter and then again period enter same thing you can tight you can use a password if you want you don’t need to I’m going to leave it empty again I’m going to leave it empty again yes we want to sign it press Y press ENTER press Y press Enter ok so now we have only one thing left is one more certificate and this time for the smartphone so I’m going to press up arrow to bring up the last last command and now I’m going to call it smartphone client so dot slash build key and then whatever identify or whatever comma name you want for your second client which in my case will be an Android smartphone press ENTER all right just like before press ENTER for common name to leave the default press Y press Y ok so by now we’ve generated all of our certificates and keys for Open VPN we have that first certificate authority certificate and key we use that certificate authority to create then create three more we created a certificate and key for the VPN server which we called VPN server we created a certificate and key for the Windows desktop which I called a desktop client and then we created a certificate and key for the Android smartphone which I called smartphone client so we’re done with that step what we need to do next is to build the diffie-hellman parameters so this is kind of an encryption thing don’t worry too much about the details but if we do this step we have the ability to use some better encryption ciphers if you really care about the details you can research diffie-hellman parameters and perfect forward secrecy PFS anyway the command we need to call is build D H so dot slash build – D H press Enter now like it says here it is going to take a long time this will be about probably 10 or 15 minutes maybe even a little bit longer you all right so yeah that took a very long time not longer than I thought it would take anyway so don’t worry that is the the most time-consuming part of this entire process and that’s the only one okay so by now we’ve generated all of the keys and certificates we need all of that is set up for openvpn let’s now configure the open VPN server so we’re going to do nano slash etc slash Open VPN slash server comm conf and that is the name of the configuration file we’re going to use press Enter
