semaphore TBOX LT2-530 Series, User Manual, Page: 104 / 197

Version : 1.09 104
Certificates and keys can be created using OpenSSL.exe.
CA Certificate:
The certificate signed from a Certification Authority. It is used to check the
authenticity of the partner certificate.
Working in an internal network, you have to create your own self-signed CA.
After having generated certificates using OpenSSL, copy the content of CA.crt here
(file generated with build-ca.bat)
Certificate:
Partner certificate.
Working in an internal network, you have to create your own certificate.
Client: After having generated certificates using OpenSSL, copy the content of <client>.crt here
(file generated with build-key.bat)
Server: After having generated certificates using OpenSSL, copy the content of
<server>.crt here
(file generated with build-key-server.bat)
Key:
It is the private key required for Authentication, associate to the certificate.
Client: After having generated certificates using OpenSSL, copy the content of <client>.key here
(file generated with build-key.bat)
Server: After having generated certificates using OpenSSL, copy the content of
<server>.key
here (file generated with build-key-server.bat)
DH Key:
To declare on the Server only. It is used to encrypt and decrypt data transferred in the
tunnel.
After having generated certificates using OpenSSL, copy the content of dh1024.pem here
(file generated with build-dh.bat)
Advanced Parameters: the default parameters are:
persist-key
persist-tun
comp-lzo
keepalive 10 120
More information at:
http://openvpn.net/index.php/open-source/documentation/manuals.html