Certificate is to be certified until Nov 24 07:43:44 2021 GMT (3650 days) Sign the certificate? [y/n]:y
1 out of 1 certificate requests certified, commit? [y/n]y Write out database with 1 new entries Data Base Updated Vars
D:\\OpenVPN\\easy-rsa>vars <回车> build-key client
D:\\OpenVPN\\easy-rsa>build-key client <回车> #生成客户端的密钥 Client 为用户端文件名
Loading 'screen' into random state - done Generating a 1024 bit RSA private key .............++++++ ....++++++
writing new private key to 'keys\\client.key' -----
You are about to be asked to enter information that will be incorporated into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. -----
Country Name (2 letter code) [CN]:
State or Province Name (full name) [Hubei]: Locality Name (eg, city) [Wuhan]:
Organization Name (eg, company) [51NB]:
Organizational Unit Name (eg, section) []:CMWAP
Common Name (eg, your name or your server's hostname) []:client Email Address [mail@host.domain]:
Please enter the following 'extra' attributes
to be sent with your certificate request A challenge password []:xxxx #同上 An optional company name []:
Using configuration from openssl.cnf
Loading 'screen' into random state - done DEBUG[load_index]: unique_subject = \Check that the request matches the signature Signature ok
The Subject's Distinguished Name is as follows countryName :PRINTABLE:'CN' stateOrProvinceName :PRINTABLE:'Hubei' localityName :PRINTABLE:'Wuhan' organizationName :PRINTABLE:'51NB' organizationalUnitName:PRINTABLE:'CMWAP' commonName :PRINTABLE:'client'
emailAddress :IA5STRING:'mail@host.domain'
Certificate is to be certified until Feb 1 05:31:40 2016 GMT (3650 days) Sign the certificate? [y/n]:y
1 out of 1 certificate requests certified, commit? [y/n]y Write out database with 1 new entries Data Base Updated
制作好的证书在D:\\OpenVPN\\easy-rsa\\key>下
二、配置RouterOS下OpenVPN Server 1、设置OpenVPN IP 地址池
2、建立profile
注：DNS添你本地的DNS（我这个是吉林联通的）
3、建立账户
4、导入证书
把dh24.pem server.crt server.csr server.key 复制下。
在
5、制作OpenVPN Server 使用证书