I have a raspi at home with openvpn so I can safely browse the internet when I use my laptop or phone in a public place (coffee shop, bar, hotel...) that has open wifi.
I want make my openvpn server use elliptic curve cryptography. Im using openvpn 2.4 and openssl 1.0.1t. I tried rolling ec keys and certs on openssl and I keep failing.
So here are the files i need and the commands im trying to use in openssl:
ecparam -out /openvpn/easy-rsa/ecKeys/ecca.pem -name prime256v1 -genkey ecparam -out /home/black/ecdh256.pem -name prime256v1
ecparam -out /etc/openvpn/easy-rsa/ecKeys/ecca.key -name prime256v1 -genkey req -days 3650 -nodes -new -x509 -key /openvpn/easy-rsa/ecKeys/ecca.key -out /openvpn/easy-rsa/ecKeys/ecca.crt
ecparam -out /openvpn/easy-rsa/ecKeys/client.key -name prime256v1 -genkey
req -days 3650 -nodes -new -key /openvpn/easy-rsa/ecKeys/client.key -out /openvpn/easy-rsa/ecKeys/server.csr
ecparam -out /openvpn/easy-rsa/ecKeys/server.key -name prime256v1 -genkey
req -days 3650 -nodes -new -key /openvpn/easy-rsa/ecKeys/server.key -out /openvpn/easy-rsa/ecKeys/server.csr
<have no idea>
Am I using the correct commands to create certs and keys i need to run in my openvpn server?
I cant seem to figure out how to create an EC ta key?
Can i use RSA for control channel and use EC for data channel or vise versa in openvpn?
Finals are coming up so I might not respond quickly. Im doing this for fun but I am sure other people will appreciate this as well. Thank you.
I found these two sites useful when creating my server if any one reading this is intrested: