I have a working OVPN server built on an RB 2011, now I would like to upgrade the hardware by installing an RB1036. Of course I would like to copy the certificates generated by the old platform to avoid having to reconfigure all clients. I tried exporting the CA.crt, server.crt files and client certificates. I imported them to the new server but there is something wrong because it doesn't work.
What is the correct procedure for exporting all certificates of the VPN SERVER and making them work on another machine?
I created the files on the old server using the following example:
Code: Select all
/certificate add name=CA country="IT" state="IT" common-name="CA" key-size=4096 days-valid=3650 key-usage=crl-sign,key-cert-sign /certificate sign CA ca-crl-host=127.0.0.1 name="CA" /certificate add name=server country="IT" state="IT" common-name="server" key-size=4096 days-valid=3650 key-usage=digital-signature,key-encipherment,tls-server /certificate sign server ca="CA" name="server" /certificate add name=client country="IT" state="IT" common-name="client" key-size=4096 days-valid=3650 key-usage=tls-client /certificate sign client ca="CA" name="client"