IPv6rs

How to install easy-rsa from https://github.com/OpenVPN/easy-rsa on Fedora CoreOS Latest

Here is a step-by-step tutorial on how to install easy-rsa from the OpenVPN/easy-rsa repository on Fedora CoreOS Latest.

1. Check pre-requisites

Make sure you have the necessary dependencies installed for installing easy-rsa on Fedora CoreOS Latest. Run the following command to check whether the packages are installed:

$ sudo dnf install git wget openssl-devel make gcc -y

2. Install easy-rsa from Github

A. First, you need to download a tarball of the latest release of the EasyRSA package from the OpenVPN/easy-rsa Github repository. Follow the command below which downloads and installs EasyRSA in the /usr/local directory:

$ wget -P /tmp https://github.com/OpenVPN/easy-rsa/releases/download/v3.0.8/EasyRSA-unix-v3.0.8.tgz && tar -zxvf /tmp/EasyRSA-unix-v3.0.8.tgz -C /usr/local && mv /usr/local/EasyRSA-v3.0.8 /usr/local/easy-rsa

B. After downloading and extracting the package, navigate to the newly created directory using the following command:

$ cd /usr/local/easy-rsa

3. Export environment variable

Set an environment variable named EASYRSA_GEN_REQ to the version of the OpenSSL library that is installed in your system. This variable tells easy-rsa which version of OpenSSL it should use. To do so, run the following command:

$ export EASYRSA_GEN_REQ=openssl-1.1.1k

4. Initialize PKI

Initialize the Public Key Infrastructure (PKI) by executing the easyrsa init-pki command.

$ ./easyrsa init-pki

5. Build CA with EasyRSA

Build the certificate authority (CA) by running the easyrsa build-ca command:

$ ./easyrsa build-ca

6. Build server and client certificates

Now that the CA is built, you can start creating server and client certificates. The easyrsa build-server-full and easyrsa build-client-full commands will cover these tasks. For example, to build a server certificate, run:

$ ./easyrsa build-server-full SERVERNAME

Here, replace SERVERNAME with the name you want to use for your server.

To build a client certificate, run:

$ ./easyrsa build-client-full CLIENTNAME

Here, replace CLIENTNAME with the name you want to use for your client.

This should complete the installation of easy-rsa on Fedora CoreOS Latest.

Congratulations! You have now successfully installed and configured easy-rsa on Fedora CoreOS Latest, which can be used for issuing certificates and keys for the OpenVPN server.

If you want to self-host in an easy, hands free way, need an external IP address, or simply want your data in your own hands, give IPv6.rs a try!

Alternatively, for the best virtual desktop, try Shells!