OpenVPN - client certificates

[Guest]

[mvrk]

Hi,

I've got an openvpn server installed on a linux machine and i would like to migrate it to EFW.

Every account of my openvpn server has a password and a certificate.

On my current openvpn server i generate the account certificate using the build-key script in easy-rsa/

On EFW, in the Advanced settings i see the option on Autentication types "X.509 certificate & PSK (two factor)"

But i don't see anywhere, when create an account, the option to generate an account certificate?

[exedor]

I am having the same problem and could sure use some assistance.  I am migrating from my custom built firewall/gateway on an old fc5 install to EFW and have a number of clients out there already configured for certificate based authentication and not username and password so I am curious on how to do this.  Just from what is in the interface, it doesn't look like the UI exposes this functionality of openvpn.

[jcasares]

AFAIK, there is no support for generating own certificates.
A feature request might be better for this than a support request.

[bytehd]

You have to do it yourself.

There are actually good tutorials on dd-wrt/openvpn sites.

But EFW wont even USE these client certs.
Where do you put them?

GUI is unfinished...