Where can I find a ca.crt file for openvpn?

VPN
1

I have been looking all over the place and I could not find a open vpn ca.crt file anywhere? Even in the manual

2

The ca.crt file is the certificate (.crt) of your Certification Authority (ca). It is a file that you should have generated very early in the process of creating certificates for your peers.

See easy-rsa/README.quickstart.md at master · OpenVPN/easy-rsa · GitHub for the recommended (and easy-to-use) easy-rsa toolkit.

See also: Certificate authority - Wikipedia

3

usually it came directly within the .ovpn profile file

try look at in using notepad++

4

The ca.crt file is the certificate (.crt) of your Certification Authority (ca). It is a file that you should have generated very early in the process of creating certificates for your peers.

This is if you are generating your certificates your self.

If you are just using OpenVPN as a client, and connecting to a VPN provider, the CA cert is provided by the service, generally. If you are getting certificates generated for you by an external authority(uncommon, but possible) then they should be providing you the CA cert.

5

I know about that but how can I turn it into a ca.cert file?

6

So i used the Easy Rsa and got a ca.crt but my system says its invalid?

Where do find the Passkey?

also i am hosting my server in the cloud (AWS EC2) how can i get the ca.crt file that was generated at the start?

7

for that. you need learn this

8

Where do find the Passkey?

You shouldn’t need a passkey.

Think of the CA cert as like an identification document of the entity that issued the certificate you are using. It’s the thing that says, “I am the entity that certified this certificate as valid, and you can use the information in here to verify that, and I am the only entity with this name capable of making this assertion under that name”.

When you say you used an Easy RSA CA, did yo use one that came with the tool (I’m assuming one came with it as an example), or did you use one that you generated? From what you are saying, typically, you should create your own CA, and part of that is creating a CA, and that would involve creating a CA key.

9

Do I have to do all the steps in the readme? Or is it just some for ca.cert? Is there a video on how to do this?

10

i opened the command line file and put in the commands then i got this file

https://www.dropbox.com/s/db7v1lyuscii5dv/2022-06-20%2020_37_40-pki.png?dl=1 (cant reply with images for some reason🙄)

11

sorry. i don’t know the rest. you will have to figure that on your own.

12

Seems ok so far. When you say your system is saying the cert is invalid, what is telling you that/where are you trying to install it (OpenVPN client config? OpenVPN server config? Something else)?

The same cert can (and often is) used in multiple places- it serves the same purpose each time, but where you are installing it and what is giving you the error may result in a problem for different reasons, so some clarity there could help.

Speaking of “passkey”, it occurred to me I made an assumption about what you mean, but it’s a confusing term to use. It’s confusing because it’s a mash of 2 things that get used in different places. Passwords, can be used to protect key files, and key files themselves, which are the private part that corresponds to a certificate. So it’s not clear what you are referring to when you say “passkey”.

13

so i have a cellular router with a open vpn function

This is the Docs Provided to me and the log file show that there are the invalid Certificate

https://www.dropbox.com/sh/1c6miia0qc4gnkv/AAAppSFUue5WYpb6csAcMMuDa?dl=0

14

is there a video on using easy rsa?