To create CA, certificates requests and sign certificates we will use a CLI utility named EasyRSA. A separate certificate and private key pair for each client issued by our CA.Īs mentioned in the prerequisites for security reasons, we’ll build the CA on a standalone machine.A separate certificate and private key pair for the server issued by our CA.A Certificate Authority (CA) certificate and private key.To do so we’ll need to create the following: When setting up a new OpenVPN server the first step is to build a Public Key Infrastructure ( PKI If an attacker manages to access the CA private key they could use it to sign new certificates, which will give them access to the VPN server. The reason why we are using a separate CA machine is to prevent attackers to infiltrate the server. The same steps (with small modifications) will apply if you’re using your server as a CA. This tutorial assumes that the CA is on a separate Ubuntu 18.04 machine.

Once you are done building the CA it’s recommended to move the CA directory somewhere secure or offline. If you don’t want to use a dedicated machine for your CA, you can build the CA on your OpenVPN server or your local machine.

Separate dedicated machine to serve as your CA (certificate authority).

The server should have a basic UFW firewall.

To an Ubuntu 18.04 server to host your OpenVPN instance. To complete this tutorial, you will need:

It implements OSI layer 2 or 3 secure network extension using the SSL/TLS protocol. OpenVPN is a fully featured, open-source Secure Socket Layer (SSL) VPN solution. We will also show you how to generate clients certificates and create configuration files This tutorial will walk you through the process of setting up your own VPN server by installing and configuring OpenVPN on Ubuntu 18.04. The safest option is to set up your own VPN server. There are many commercial VPN providers you can choose from, but you can never be truly sure that the provider is not logging your activity. Whether you want to access the Internet safely and securely while connected on an untrusty public Wi-Fi network, bypass Geo-restricted content or allow your coworkers to connect securely to your company network when working remotely, using a VPN is the best solution.Ī VPN allows you to connect to remote VPN servers, making your connection encrypted and secure and surf the web anonymously by keeping your traffic data private.

Tor vpn custom openvpn configuration