Certificates

After the Definitions configuration its necessary to create SSL digital certificates. A digital certificate has the following informations:

• Identification of the titular entity;
• Public Key for the titular entity;
• Serial number Certificate;
• Valid date Certificate;
• Identification of the Certifying Authority (The Certificate issuing entity);
• Digital signature of the Certifying Authority.

It will be generated a Digital Certificate for the server and for each of the clients using the VPN SSL connection. Clicking on Insert will start the generation of the server's Certificate. You will then have to insert data in the following fields:

• Country Code;
• Country;
• City;
• Company;
• Nome: Certificate name;
• Email: Company's email.

The next certificates shall be for the clients, and it is necessary to fill the following fields (Figure 4.25):

• Name: Certificate name. Normally the single name of the person/entity that will connect;
• E-Mail: Client e-mail address;
• Password: A password (PSK) with six characters minimum;
• Associated access policies: The specific client certificate can be associated to a policy, so we can control to what LAN machines the client will have access to. If none, access will be granted to all the defined network routes.

Figure 4.25: VPN SSL - Client certificate configuration

Afterwards, it is necessary to download the certificate and send it to the customer who shall establish the VPN connection. The .zip file contains:

• Server public key: ca-server-domain.crt;
• Client private key: certificate_name.key;
• Client public key: certificate_name.crt;
• VPN configuration: certificate_name.ovpn;

Client

In the client side you have to install the specific software to create the VPN SSL connection- OpenVPN^4.5. Then you must uncompress the certificate file to a new directory in
c:\Program Files\OpenVPN\config.
To start VPN connection you have to click on the OpenVPN icon located in the tool bar with the right button, choose the connection you want and click Connect.

The option Delete All should only be used to restart the all process.

Footnotes

... OpenVPN^4.5

Software: openvpn.net | Windows GUI: openvpn.se