1 # easy-rsa parameter settings
3 # NOTE: If you installed from an RPM,
4 # don't edit this file in place in
5 # /usr/share/openvpn/easy-rsa --
6 # instead, you should copy the whole
7 # easy-rsa directory to another location
8 # (such as /etc/openvpn) so that your
9 # edits will not be wiped out by a future
10 # OpenVPN package upgrade.
12 # This variable should point to
13 # the top level of the easy-rsa
15 export EASY_RSA="`pwd`"
18 # This variable should point to
19 # the requested executables
21 export OPENSSL="openssl"
22 export PKCS11TOOL="pkcs11-tool"
26 # This variable should point to
27 # the openssl.cnf file included
29 export KEY_CONFIG=`$EASY_RSA/whichopensslcnf $EASY_RSA`
31 # Edit this variable to point to
32 # your soon-to-be-created key
35 # WARNING: clean-all will do
36 # a rm -rf on this directory
37 # so make sure you define
39 export KEY_DIR="$EASY_RSA/keys"
41 # Issue rm -rf warning
42 echo NOTE: If you run ./clean-all, I will be doing a rm -rf on $KEY_DIR
44 # Increase this to 2048 if you
45 # are paranoid. This will slow
46 # down TLS negotiation performance
47 # as well as the one-time DH parms
51 # In how many days should the root CA key expire?
54 # In how many days should certificates expire?
55 export KEY_EXPIRE=3650
57 # These are the default values for fields
58 # which will be placed in the certificate.
59 # Don't leave any of these fields blank.
60 export KEY_COUNTRY="US"
61 export KEY_PROVINCE="CA"
62 export KEY_CITY="SanFrancisco"
63 export KEY_ORG="Fort-Funston"
64 export KEY_EMAIL="me@myhost.mydomain"