From 3eb8258a8d24c5f2c92718f9589e4d798e05630c Mon Sep 17 00:00:00 2001
From: jdubois <jdubois+gitit@evolix.fr>
Date: Wed, 11 Mar 2020 12:07:35 +0100
Subject: [PATCH] Changer clef CA OpenVPN

---
 HowtoSSL.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/HowtoSSL.md b/HowtoSSL.md
index 2f75092a..a9833061 100644
--- a/HowtoSSL.md
+++ b/HowtoSSL.md
@@ -107,6 +107,14 @@ $ rm private.pem private.key
 $ mv private-new.pem private.pem
 ~~~
 
+On peut également changer la clé privée d'une CA, par exemple pour OpenVPN, comme ceci :
+
+~~~
+# openssl rsa -in /etc/shellpki/cakey.key -aes256 -out /etc/shellpki/cakey-new.key
+# rm /etc/shellpki/cakey.key
+# mv /etc/shellpki/cakey-new.key /etc/shellpki/cakey.key
+~~~
+
 ### Convertir un certificat PEM vers d'autres formats
 
 Voir <http://security.ncsa.illinois.edu/research/grid-howtos/usefulopenssl.html>