-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 A brief and useful example:
I choose to use elliptic curve ED448.
This can be set in the `vars` file using
set_var EASYRSA_ALGO ed
set_var EASYRSA_CURVE ed448
Or by command line:
easyrsa --use-algo=ed --curve=ed448 --nopass --days=10000 build-ca
Continue to use those options on the command line for subsequent commands.
Choose --days to serve your needs.
I use --nopass for ease only, you can use passwords as you choose.
Note; Command `init-pki` does not effect the crypto that will be used.
The resulting PKI can be used along side OpenVPN option --tls-groups X448.
Use the PKI from EasyRSA, along with --tls-groups option on the server side.
Enjoy,
R
-----BEGIN PGP SIGNATURE-----
Version: ProtonMail
wsBzBAEBCAAnBYJlIa36CZBPl5z2a5C4nRYhBAm8PURno41yecVVVU+XnPZr
kLidAADa9gf8C6TJp3v8vtqPCSypca1pK/NuyvM5T1BjzJgqWqgTiqb5QP5H
aRcaiKb0WHMwGTt4rDOGz/sWnn6Wo7DqC76rFpn08luUXS2XkeWcmQ9Ro1Z4
6mbUSYJFwaRAW9eE85mDb7CT+RsnbaDUYjL64c5G/otia3LMwFgp5vKH21D8
wuiKTU26tPWoUd2oWZf9lDagaInbnXbXSqFcp585vSHvyRMwt9kM/i1ASr0p
GQ/B/1ymduMNjI+35bvZODiQdz1AParsuznDArmvpFKTXylWN2gb3eqztj+E
5UPtiPo/HlITxyQ5aFpjNVcF5B68KTVbRFHT88sofVuJsmAeEq+cIA==
=4f/t
-----END PGP SIGNATURE-----
publickey - tincantech@protonmail.com - 0x09BC3D44.asc
Description: application/pgp-keys
publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig
Description: PGP signature
_______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
