-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

To build private keys without passwords, either:
- easyrsa build-client-full cli-name nopass (The original method)
or
- easyrsa --nopass build-client-full cli-name (The new method)
Option --nopass can be either --nopass or --no-pass
All will remain supported. 

Without one of these options, the key will be password protected.

You do not need to run openssl to encrypt the file further,
but that is entirely your decision.

To customise options specified by vars, in the case of email use:
- easyrsa --req-email=n...@example.net build-client-full cli-name
Add the options you choose for passwords.

See 'easyrsa help options' for more.

FTR: OpenSSL claims that email, if used, is generally the email of
the CA administrator, not email per client certificate, but that is
entirely your decision.

Regards
R
-----BEGIN PGP SIGNATURE-----
Version: ProtonMail

wsBzBAEBCAAnBQJkBhVqCRBPl5z2a5C4nRYhBAm8PURno41yecVVVU+XnPZr
kLidAABR2Af8CxIFQmowkfnW/YCy7T3UYe2DSeHdXQIxZ+08nG6Uq2eOijwj
NAcS3XVd++Ca2nCSxLD4T99+zKVUK8jjgTIk5V4ZrsoOPRdsO55YzG3uDwMG
I3iERCg+YPcNYf4L6f8P0FQGD7D64yfLDiGKUbelfjEuzcGyIvCtXuvhKwyg
S5Ny58ugAbje3ZFCXOxqXyCz380rGkTKvgCDwtfGoooGWlGGO8z1vc8LJvcF
C6dMhlCjdZITQ4eJC0cgvPsgJjFAdu5KfJMEyLQv/J77IK1QwS6an0D3Q3NF
AJrCx7ydEze6DTqfUYhpSvqPvnt4/rISYIlaS+O2tRDOJIOx7i5pbg==
=XJxE
-----END PGP SIGNATURE-----

Attachment: publickey - tincantech@protonmail.com - 0x09BC3D44.asc
Description: application/pgp-keys

Attachment: publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig
Description: PGP signature

_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to