Home

OpenVPN with smart cards / crypto tokens HOWTO

OpenVPN allows to set-up powerful VPNs for GNU/Linux, Mac OS X and Windows, using a variety of authentication and encryption protocols, including RSA keys and X.509 certificates.

In this tutorial, we will build a secure OpenVPN configuration, going from simple to complex:

  • Firsty, use secret passwords, to make sure OpenVPN works and clients can connect.
  • Secondly, use self-signed certificates and smartcards. Smartcards allow users to process their RSA keys and X.509 certificates without displaying them. It is the most secure connection and authentication method for OpenVPN.

We will be using the Feitian PKI smartcard or the Feitian ePass PKI token.

Please note that this tutorial is being updated, it is not yet complete.

Bookmark/Search this post with