Generate and sign your client key and certificate. We use the example server name of server in the example below. Generate and sign your server key and certificate. Give the CA a common name of your choosing, or just press Enter to accept the default name of Easy-RSA CA. easyrsa init-pkiīuild your Certificate Authority (CA). Initialize the public key infrastructure. You can edit the vars file if you wish, but we will just use the defaults. Make a copy of the example variables: cp vars.example vars Make a copy of the EasyRSA scripts and configuration files: cp -r /usr/share/easy-rsa ~ cd ~/easy-rsa On Debian 10 and Ubuntu 20.04, this installs EasyRSA 3.0.6. Create Keys and Certificates with EasyRSA On your server, choose a random port number between 10,000 and 50,000 for OpenVPN. We therefore sometimes refer to the server or client generically as Debian/Ubuntu. You could also use a recent version of Ubuntu. This article will show you how to install and configure OpenVPN with the XOR patch on a Debian server and client. They state that “the patch is attractive because it is so easy to implement: simply apply the patch to both the OpenVPN server and the OpenVPN client and add a single, identical option to the configuration files for each.” The XOR patch is automatically included in Tunnelblick OpenVPN software for macOS. The XOR patch for OpenVPN comes to us courtesy of the Tunnelblick team.

What is tunnelblick