83
OpenVPN Certificate
Using digital certificates for authentication instead of preshared keys in VPNs is considered more secure. In
WoMaster’ devices, digital certificates are one way of authenticating two peer devices to establish a VPN tunnel.
Key Generation in the device
For OpenVPN connectivity, the OpenVPN Client must have the client Key/CA file generated by the OpenVPN
Server. Normally, you can generate the key in your VPN server and upload to the router switch which is Open VPN
client. However, while you just want to establish site to site VPN connectivity, install another Open VPN server may
consume lots of cost and engineer effort.
In the latest firmware, the WoMaster Secure Router Switch supports Key generation feature. Click
“Generate”
in
“Generate TLS Keys”
and
“Generate Static Key” in the Open VPN Router
, the system prompts you to wait 30
seconds to generate the key. Click “Yes” to start and wait 30 seconds. After generated, there are some VPN key/CA
files generated and stored within the system. The files include both OpenVPN Server and Client key/ca files.
The two key/ca files,
dh1024.pem and server.crt
are applied to Open VPN Server only. The two files must be
stored within the Open VPN server.
For security concern, the files are not allowed to download. You just need to
generate the keys while configured the Router as an Open VPN Server.
The rest of key/ca files include
CA, Client Cert and Client Key
. The three files must be stored within both the
Open VPN server and client. You can download the keys to your PC and upload the files to OpenVPN client. Then the
client has the same key. This is usefully tool for you to build you OpenVPN connectivity.
If you prefer to use Static Key, you can generate the
static.key
in OpenVPN Server and put the key in both
OpenVPN Server and Clients.
You can see the files’ name by select the drop-down menu of “Delete VPN Key”, download/import OpenVPN
client key/ca files in below columns.
