[dutch_user]

Hello friends,

After recently building a tun tunnel, i ran into some issues wich made me think of running a TAP tunnel between 2 locations

I followed this topic to configure the bridge [url] https://forums.openvpn.net/viewtopic.php?t=7049 [/url]

but reading the logs, i guess i need to make some certificates for this endavour to work.

Can dd-wrt create these certificated for me, or do i need to go another path?

like building them om on a computer, what is the right way to do this?

thanks in advance

[Per Yngve Berg]

There is no difference in the certificates between tun and tap.
With tun, there have to be different sub-nets on both sides, while tap needs the same on both sides.

What issues did you have?

[dutch_user]

Hi Per,

The logs tells me that i need to install/place certificates and thats fine,

But i have no idea how i can make these certificates, can ddwrt make their own certificates or can i use a computer to make them and copy/paste them ?


It's for 2 dd-wrt routers

[Per Yngve Berg]

It must be generated at a workstation.

https://openvpn.net/index.php/open-source/documentation/howto.html#pki

[spuriousoffspring]

Free download that will help:

https://notepad-plus-plus.org

[dutch_user]

So.... i've been trying for heck to get easy-rsa working, but my computer refuses it.... (windows
am about to throw it out of the window....



is tere an alternative option?


Is it possible to just "type in" my own "key" in the static field? (basicly typing some random stuff on the keyboard, and copy/paste that..)

[dutch_user]

Jxm, thanks !!!! That worked....

Now i can build certificates, thanx again

[Boogalooz]

I followed the steps outlined by jxm (thank you sir) and have 2 questions.

(1) For some reason, my .pem file was created as : "dh4096.pem" and stored in the easy-rsa/keys folder.

Does this mean that OpenVPN will use 4096 bit encryption? I wanted to try and set this up using 2048 encryption so I could do side by side speed tests using my 1900ACv2 and a PiVPN setup I have been using.

(2) If the dh4096.pem is the instruction that tells openvpn to use 4096 encryption, where in the setup process did I go wrong, if my desire is to use 2048 bit encryption?

Thanks.