Skip to content

Commit c4870d6

Browse files
authored
openvpn: Update legacy guide to reflect current user certificate creation (opnsense#686)
1 parent f8bffa1 commit c4870d6

File tree

1 file changed

+13
-11
lines changed

1 file changed

+13
-11
lines changed

source/manual/how-tos/sslvpn_client.rst

Lines changed: 13 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -155,26 +155,28 @@ For the first step we enter:
155155

156156
================== ==============================================
157157
**Username** *Donald*
158-
**Password** (2x) *S3cr3tP@ssw0rd*
159-
**Full name** *Donald Duck*
160-
**Certificate** *Check “Click to create a user certificate”*
158+
**Password** *Choose a strong password*
159+
**Full name** *Donald*
161160
**OTP seed** *Check “Generate new secret”*
162161
================== ==============================================
163162

164-
Click **Save** and you will be redirected to create the User Certificate.
165-
Fill in the Certificate form with the following for our example (leave anything
166-
not listed on its presented defaults):
163+
After pressing **Save**, click on the button ``Search certificates by username``
164+
in the same row as the created user to be redirected to the certificate page. Press
165+
*+* to create a new certificate with the common name of this user.
166+
Fill in the certificate form with the following (leave anything
167+
not listed on default):
167168

168169
=========================== ========================================
169170
**Method** *Create an internal Certificate*
170-
**Descriptive Name** *Leave default (Donald)*
171-
**Certificate authority** *SSL VPN CA*
171+
**Descriptive Name** *Donald*
172172
**Type** *Client Certificate*
173-
**Key length** *4096*
173+
**Key type** *RSA-4096*
174174
**Digest Algorithm** *SHA512*
175+
**Issuer** *SSL VPN CA*
176+
**Common Name** *Donald*
175177
=========================== ========================================
176178

177-
Click **Save** and you will be redirected to the User page.
179+
Click **Save** and go back to the user page.
178180
Now we will activate your newly created seed with your Google Authenticator
179181
compatible app. To do so click in the **Click to unhide** button in the
180182
**OTP QR code** row and you will get a QR code to scan with your smartphone.
@@ -183,7 +185,7 @@ See also: :doc:`/manual/how-tos/two_factor`
183185

184186
.. Note::
185187

186-
Always make sure to use the same **Certificate authority** as the certificate authority created earlier, as
188+
Always make sure to use the same **Issuer** as the certificate authority created earlier, as
187189
this links the clients / users to the correct openvpn server.
188190

189191
-----------------------------

0 commit comments

Comments
 (0)