easy-rsa for Debian ------------------- easy-rsa is a set of scripts to easy the administration of a Certificate Authority. For example to manage openvpn scripts. The effortless way to use it is calling "make-cadir DIRECTORY", which will create a new directory with symlinks to the scripts and a copy of the configuration files so you can edit them to suit your needs. i.e. ~$ make-cadir my_ca ~$ cd my_ca ~/my_ca$ vi vars -- Alberto Gonzalez Iniesta Mon, 12 Nov 2012 18:18:57 +0100 Improving security of created certificates ------------------------------------------ easy-rsa defaults use 2048 bits for keylength and 10 years (3650 days) as certificate lifetime. bettercrypto.org suggests increasing the keylength to 4096 bits and decreasing the certificate lifetime. You can change those values in the 'vars' file of your CA directory. -- Alberto Gonzalez Iniesta Tue, 07 Jan 2014 12:36:35 +0100