I'm not sure if it sounds like a stupid question but all the guides I've looked at when it comes to making certificates for OpenVPN all use Easy-RSA.
Some of my servers such as my NAS, and OpenMediaVault server on my home LAN use SSL to encrypt the data, therefore I have created my own CA (certificate of authority) that is installed to each client. Having a single CA certificate installed automatically approves any of the certificates that are used on my servers saving installing multiple certificates on the client.
In regards to OpenVPN, I would rather skip making a second root certificate for OpenVPN and instead utilise the existing trusted root certificate I have made with OpenSSL already installed on my clients.
Is this possible?
Would the generation of the diffie hellman be the equivalent of the
openssl req x509 command?
This is the first command I use when creating my OpenSSL certificates
openssl req -x509 -newkey rsa:4096 -keyout ca/cakey.pem -out ca/cacert.pem -days 3650 -sha256 -nodes -config configs/ca_openssl.cnf
I'm just trying to find out the equivalent commends to the easy-RSA