diff --git a/content/post/openvpn-install.md b/content/post/openvpn-install.md index e84c07f..2741e21 100644 --- a/content/post/openvpn-install.md +++ b/content/post/openvpn-install.md @@ -31,15 +31,16 @@ vpn 客户端 | vpn-client | CentOS7 | 192.168.1.91 # vars 文件包含证书相关配置,可修改 cp /usr/share/doc/easy-rsa-3.0.3/vars.example /opt/easy-rsa/vars ``` +- 初始化 pki 目录结构 + ```bash + cd /opt/easy-rsa + ./easyrsa init-pki + ``` - 修改 /opt/easy-rsa/pki/safessl-easyrsa.conf 中如下配置,增加证书有效时间为 10 年 ``` default_days = 3650 default_crl_days = 3650 ``` -- 初始化 pki 目录结构 - ```bash - ./easyrsa init-pki - ``` - 生成免密 ca 证书 ```bash # 使用默认 common name 即可