Adds extra security in case server is ever breached. If an attacker is able to take your CA private key it is encrypted with a passphrase.
The regular script allows anyone who is able to steal your CA private key to issue infinite new clients for your VPN without any barriers.
Obviously your server should be protected enough your private key is not stolen in the first place, but this adds an extra level of security.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/angristan/openvpn-install/pull/449
**Author:** [@ghost](https://github.com/ghost)
**Created:** 7/15/2019
**Status:** ❌ Closed
**Base:** `master` ← **Head:** `patch-1`
---
### 📝 Commits (6)
- [`5400dea`](https://github.com/angristan/openvpn-install/commit/5400deadad443303d2245ca10da7ba8f7a369c6c) OpenVPN script but asks for pass for CA authority
- [`4b9b642`](https://github.com/angristan/openvpn-install/commit/4b9b642514f4ccd1739dfae2ad387b511197a279) Update and rename openvpn-install-capass.sh to openvpn-install-more-secure.sh
- [`2f16a23`](https://github.com/angristan/openvpn-install/commit/2f16a230dad9eba7a136631e5aa15e7a9e1a11d6) Update README.md
- [`f357eca`](https://github.com/angristan/openvpn-install/commit/f357ecad9c72c7c05dcfcee0cc9cf81933f8fc38) Update openvpn-install-more-secure.sh
- [`cb8b34c`](https://github.com/angristan/openvpn-install/commit/cb8b34c81e69b59b4e0b04b2fc98cb00c04dbc84) Update openvpn-install-more-secure.sh
- [`07a8357`](https://github.com/angristan/openvpn-install/commit/07a8357f563ddb077681783b3ea35595e86024eb) Update openvpn-install-more-secure.sh
### 📊 Changes
**2 files changed** (+54 additions, -25 deletions)
<details>
<summary>View changed files</summary>
📝 `README.md` (+23 -2)
📝 `openvpn-install-more-secure.sh` (+31 -23)
</details>
### 📄 Description
Adds extra security in case server is ever breached. If an attacker is able to take your CA private key it is encrypted with a passphrase.
The regular script allows anyone who is able to steal your CA private key to issue infinite new clients for your VPN without any barriers.
Obviously your server should be protected enough your private key is not stolen in the first place, but this adds an extra level of security.
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/angristan/openvpn-install/pull/449
Author: @ghost
Created: 7/15/2019
Status: ❌ Closed
Base:
master← Head:patch-1📝 Commits (6)
5400deaOpenVPN script but asks for pass for CA authority4b9b642Update and rename openvpn-install-capass.sh to openvpn-install-more-secure.sh2f16a23Update README.mdf357ecaUpdate openvpn-install-more-secure.shcb8b34cUpdate openvpn-install-more-secure.sh07a8357Update openvpn-install-more-secure.sh📊 Changes
2 files changed (+54 additions, -25 deletions)
View changed files
📝
README.md(+23 -2)📝
openvpn-install-more-secure.sh(+31 -23)📄 Description
Adds extra security in case server is ever breached. If an attacker is able to take your CA private key it is encrypted with a passphrase.
The regular script allows anyone who is able to steal your CA private key to issue infinite new clients for your VPN without any barriers.
Obviously your server should be protected enough your private key is not stolen in the first place, but this adds an extra level of security.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.