Dan Ritter wrote: > On Wed, Sep 05, 2018 at 12:29:02AM -0000, Dan Purgert wrote: >> Dan Ritter wrote: >> > On Tue, Sep 04, 2018 at 07:42:58PM -0400, Wayne Sallee wrote: >> >> Has anyone set up OpenVPN with ssh-keygen -t rsa ? >> >> >> > >> > Technically, you can do that. >> >> ssh-keygen generates ssh keys, not x.509 certificates ... > > An x.509 cert contains an RSA key signed by a CA. openssl can do > the signing, at which point you've half-reimplemented easy-rsa. > > -dsr-
Sure - but it just seems silly to use ssh-keygen, then openssl to convert it to the right format when openssl (or the easy-rsa wrapper thereto) can do all the work for you in one go. -- |_|O|_| Registered Linux user #585947 |_|_|O| Github: https://github.com/dpurgert |O|O|O| PGP: 05CA 9A50 3F2E 1335 4DC5 4AEE 8E11 DDF3 1279 A281