[PR #449] [CLOSED] Asks for pass for new CA authority #107

Closed
opened 2026-11-11 16:39:49 +01:00 by Alvin-Zilverstand · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/angristan/openvpn-install/pull/449
Author: @ghost
Created: 7/15/2019
Status: ❌ Closed

Base: master ← Head: patch-1


📝 Commits (6)

  • 5400dea OpenVPN script but asks for pass for CA authority
  • 4b9b642 Update and rename openvpn-install-capass.sh to openvpn-install-more-secure.sh
  • 2f16a23 Update README.md
  • f357eca Update openvpn-install-more-secure.sh
  • cb8b34c Update openvpn-install-more-secure.sh
  • 07a8357 Update openvpn-install-more-secure.sh

📊 Changes

2 files changed (+54 additions, -25 deletions)

View changed files

📝 README.md (+23 -2)
📝 openvpn-install-more-secure.sh (+31 -23)

📄 Description

Adds extra security in case server is ever breached. If an attacker is able to take your CA private key it is encrypted with a passphrase.

The regular script allows anyone who is able to steal your CA private key to issue infinite new clients for your VPN without any barriers.

Obviously your server should be protected enough your private key is not stolen in the first place, but this adds an extra level of security.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/angristan/openvpn-install/pull/449 **Author:** [@ghost](https://github.com/ghost) **Created:** 7/15/2019 **Status:** ❌ Closed **Base:** `master` ← **Head:** `patch-1` --- ### 📝 Commits (6) - [`5400dea`](https://github.com/angristan/openvpn-install/commit/5400deadad443303d2245ca10da7ba8f7a369c6c) OpenVPN script but asks for pass for CA authority - [`4b9b642`](https://github.com/angristan/openvpn-install/commit/4b9b642514f4ccd1739dfae2ad387b511197a279) Update and rename openvpn-install-capass.sh to openvpn-install-more-secure.sh - [`2f16a23`](https://github.com/angristan/openvpn-install/commit/2f16a230dad9eba7a136631e5aa15e7a9e1a11d6) Update README.md - [`f357eca`](https://github.com/angristan/openvpn-install/commit/f357ecad9c72c7c05dcfcee0cc9cf81933f8fc38) Update openvpn-install-more-secure.sh - [`cb8b34c`](https://github.com/angristan/openvpn-install/commit/cb8b34c81e69b59b4e0b04b2fc98cb00c04dbc84) Update openvpn-install-more-secure.sh - [`07a8357`](https://github.com/angristan/openvpn-install/commit/07a8357f563ddb077681783b3ea35595e86024eb) Update openvpn-install-more-secure.sh ### 📊 Changes **2 files changed** (+54 additions, -25 deletions) <details> <summary>View changed files</summary> 📝 `README.md` (+23 -2) 📝 `openvpn-install-more-secure.sh` (+31 -23) </details> ### 📄 Description Adds extra security in case server is ever breached. If an attacker is able to take your CA private key it is encrypted with a passphrase. The regular script allows anyone who is able to steal your CA private key to issue infinite new clients for your VPN without any barriers. Obviously your server should be protected enough your private key is not stolen in the first place, but this adds an extra level of security. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Alvin-Zilverstand added the pull-request label 2026-11-11 16:39:49 +01:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/openvpn-install#107