I'm setting up the OpenVPN server daemon on a Buffalo N600 router which came stock with DD-WRT v.24 SP2.
I'm following the instructions at VPN (The Easy Way) V24+ to set up the server side of things and then set up an OpenVPN client (running on Windows). The instructions start out with:
As of DD-WRT v.24 SP1, it is now possible to set up DD-WRT as an OpenVPN appliance using only the web-based GUI. It is no longer necessary to issue shell commands, or to echo quoted certificates and config files using a shell script.
Sounds good. Here's a screenshot of the router's OpenVPN server configuration screen:
Given the statement about GUI support, I left "Config via" set as "GUI".
I followed the "Creating Certificates Using Easy RSA in Windows" section and created my certs with no problems. The documentation then talks about pasting the certs I just created into the relevant fields on the router's config screen:
The first row says that into the "Public Server Cert (CA Cert)" field I should insert the contents of the "ca.crt" file. But there is a "Public Server Cert" field and a "CA Cert" field. And the 3rd row says that into the "Public Server Cert" field I should insert the contents of the "server.crt" file.
The field mappings don't match and are ambiguous. What goes where? Should I really be in GUI mode?