apt-get install openssl
export KEY_COUNTRY=""
export KEY_PROVINCE=""
export KEY_CITY=""
export KEY_ORG
export KEY_EMAIL=""
export KEY_EMAIL=
export KEY_CN=
export KEY_NAME=
export KEY_OU=
export PKCS11_MODULE_PATH=
export PKCS11_PIN=1234
So in your case, these are you country (where you live, where your company is), province (same), city (same), organization name, email, common name (unique for this CA), name, and organizational unit - in this order.
The last two lines are a path and a pin for PKCS11 (usually for smartcards).
Only CN has to be uniqe, so consider using users usernames or something simmilar. OU can be anything you wish (marketing, engineering, or even empty).
TUN=routing
TAP=bridging
https://wiki.debian.org/openvpn%20for%20server%20and%20client
Voting 0