[122464] in North American Network Operators' Group
Re: dns interceptors
daemon@ATHENA.MIT.EDU (Randy Bush)
Mon Feb 15 00:07:55 2010
Date: Mon, 15 Feb 2010 14:07:17 +0900
From: Randy Bush <randy@psg.com>
To: Scott Howard <scott@doc.net.au>
In-Reply-To: <f1dedf9c1002142015t58ab34cbuebbeed0e62f00673@mail.gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
>> having probs with certs, i.e. what --outform it wants. not finding in
>> docs. tried raw, but now guessing pem. same for client and server
> Use the easy-rsa stuff and it will do all the hard work for you.
> http://openvpn.net/index.php/open-source/documentation/howto.html
we have a pki we know and love
but i am trying/disecting easy-rsa to see what it is doing
randy