From 13b2313ace9797fc6b6ba8980ae592c930e16ee9 Mon Sep 17 00:00:00 2001 From: Steffan Karger Date: Thu, 23 Oct 2014 00:14:29 +0200 Subject: Modernize sample keys and sample configs MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit I kept most of the certificate properties equal to the old certs, since some people's test scripts might rely on them (and it does not require any creativity from my part). Changes: * Add script to generate fresh test/sample keys (but keep sample keys in git for simple testing) * Switch from 1024 to 4096 bits RSA CA * Switch from 1024 to 2048 bits client/server RSA keys * Switch from 1024 to 2048 bits Diffie-Hellman parameters * Generate EC client and server cert, but sign with RSA CA (lets us test EC <-> RSA interoperability) * Remove 3DES cipher from 'sample' config * Add 'remote-cert-tls server' to client config * Update config files to deprecate nsCertType in favour of the keyUsage and extendedKeyUsage extensions. * Make naming more consistent Signed-off-by: Steffan Karger Acked-by: Samuli Seppänen Message-Id: URL: http://article.gmane.org/gmane.network.openvpn.devel/9226 Signed-off-by: Gert Doering --- sample/sample-keys/client.p12 | Bin 0 -> 4533 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 sample/sample-keys/client.p12 (limited to 'sample/sample-keys/client.p12') diff --git a/sample/sample-keys/client.p12 b/sample/sample-keys/client.p12 new file mode 100644 index 0000000..8458c79 Binary files /dev/null and b/sample/sample-keys/client.p12 differ -- cgit