cd Desktop\r\nmkdir SR305 #I made this folder to keep all the certificates and keys in one place for transferring later\r\ncd SR305\r\nopenssl genrsa -out ca.key 4096\r\nopenssl req -x509 -new -nodes -key ca.key -sha256 -days 3650 -out ca.crt -subj \"\/CN=SR305-CA\"\r\nopenssl genrsa -out sr305-server.key 2048\r\nopenssl req -new -key sr305-server.key -out sr305-server.csr -subj \"\/CN=sr305-server\"\r\ncat > server_ext.cnf <\r\n\r\n(switch to a machine that has an OpenVPN server running on it, I happen to have access to a machine that runs fine software from Cutedge Systems, specifically OpenVPN Enabler)\r\n\r\ncd \/usr\/local\/cutedge\/openvpn\/sbin \r\n.\/openvpn --genkey secret ~\/Desktop\/ta.key<\/code>\r\n\r\n(transfer above \"ta.key\" file to my MacBook Pro's SR305 folder on the desktop and continue there)\r\n\r\nopenssl ca -gencrl -out crl.pem -config openssl.cnf #this command\/line can likely be removed \r\nopenssl genrsa -out client01.key 2048\r\nopenssl req -new -key client01.key -out client01.csr -subj \"\/CN=client01\"\r\ncat > client_ext.cnf <\r\n\r\nThe commands are mostly done, now we must configure some additional software through the SR305's web interface as follows:\r\n\r\n** I forgot what I was going to add here, will get to it later. **\r\n","protected":false},"excerpt":{"rendered":"The user manual and interface for setting up OpenVPN on Advantek’s SR305 leaves much to be desired. I’m going to post what I did to successfully configure it for certificate-based authentication and handling multiple users. Also, since most of the … Continue reading