If only using ‘Remote ( SSL/TLS )’ server mode, create a new User Certificate for the new client. Make sure to sign the cert with the same CA that the Server Cert is signed with.
Once the new User Certificate is created, the option to export the Client config via the ‘Client Export’ section becomes available.
Export using the ‘Most clients’ inline configuration type.
Move the previous file into the /etc/openvpn/client/
directory
mv myVPN-1.ovpn /etc/openvpn/client/ && \
cd /etc/openvpn/client/
Change the ovpn
file extension to conf
mv myVPN-1.ovpn myVPN-1.conf
Test that the connection will come up.
openvpn --config /etc/openvpn/client/myVPN-1.conf
To start the VPN client and open the connection on boot.
Enable the service using the name of the conf file (without the .confg
extension, but WITH the .service
extension)
systemctl enable --now openvpn-client@myVPN-1.service
Show the status of the OVPN client. The Client should now be connected to the Server.
systemctl status openvpn-client@*