1

I am developing a open source application wrapper over OpenVPN library for Android. For that I need to generate openvpn conf file.

I have followed OpenVPN how but did not understand how to generate .conf file on Android.

Is there any way to generate .conf/ .ovpn file locally on Android device ?

I could generate .cert and RSA private key and OpenVPN static key but I am still not clear about generating CA certificate for a particular client.

is there anything ( server side certificate /private key)I need to get from server.

I am still learning certificate based authentication for OpenVPN so my question can be a little naive so please bear with it :)

devilcol
  • 113
  • 2
  • 4

3 Answers3

2

I have installed hundreds of OpenVPN servers and I never needed a DH file on the Client.

Server needs:

  • dh
  • ca.crt
  • ca.key
  • servername.crt
  • servername.key
  • optional (recommended) ta.key
  • a config file

Client:

  • the same ca.crt
  • clientname.crt
  • clientname.key
  • ta.key (if used in the server)
  • client.conf

Regards!

Kenneth Peiruza
  • 21
  • 2
1

You have to write configuration files on your own. OpenVPN server administrator should provide client configuration file. Configuration file for client looks almost the same on Linux/Windows/Android/etc.. For client you have to generate "client certificate", not "CA certificate". Maybe you should read more about PKI (http://bit.ly/YP5dvZ). If you are using certificates for authentication, then client should have configuration file, DH file, CA certificate, private and public client keys to work.

0xFF
  • 368
  • 1
  • 8
-2
client

dev tun
proto tcp
remote 1.2.3.4 1194

resolv-retry infinite
nobind

persist-key
persist-tun

verb 1

keepalive 10 900
inactive 3600
comp-lzo

<ca>
-----BEGIN CERTIFICATE-----
....................................
-----END CERTIFICATE-----
</ca>

<cert>
-----BEGIN CERTIFICATE-----
...........................
-----END CERTIFICATE-----
</cert>

<key>
-----BEGIN RSA PRIVATE KEY-----
.....................
-----END RSA PRIVATE KEY-----
</key>
fukawi2
  • 5,396
  • 3
  • 32
  • 51
nick.Z
  • 1
  • 1
  • Please see my edit to learn how to correctly format. Also, please add an actual explanation rather than just dumping a sample configuration file. – fukawi2 Dec 12 '14 at 04:28