ShellPKI

This script is a wrapper around OpenSSL to manage all the PKI stuff for OpenVPN.

Usage

First create the directory, then put the script and the OpenSSL configuration file in it. You may want to edit the configuration.

mkdir -p /etc/openvpn/ssl
cp /path/to/shellpki.sh /etc/openvpn/ssl/
cp /path/to/openssl.cnf /etc/openvpn/ssl/
$EDITOR /etc/openvpn/ssl/openssl.cnf

Then you'll need to initialize the PKI.

cd /etc/openvpn/ssl
sh shellpki.sh init

Once done, you can create all the certificates you need.

sh shellpki.sh create