リモートデスクトップ接続の設定例前編（仮想プライベートネットワークの構築）

C:\>cd \Program Files\OpenVPN\easy-rsa　　　　　　<----証明書と鍵の作成時の場所移動。

C:\Program Files\OpenVPN\easy-rsa>init-config　<----インストール後の1回だけ、必ず実行する。

C:\Program Files\OpenVPN\easy-rsa>copy vars.bat.sample vars.bat
 1 個のファイルをコピーしました。

C:\Program Files\OpenVPN\easy-rsa>copy openssl.cnf.sample openssl.cnf
 1 個のファイルをコピーしました。

C:\Program Files\OpenVPN\easy-rsa>vars　<----------環境変数の設定で、コマンドプロンプト画面で本作業をする前に必ず実行すること。

C:\Program Files\OpenVPN\easy-rsa>clean-all　<------全証明書と鍵の消去。

 1 個のファイルをコピーしました。
 1 個のファイルをコピーしました。

C:\Program Files\OpenVPN\easy-rsa>build-ca　<-------CA(認証局)の証明書と鍵の作成。
Loading 'screen' into random state - done
Generating a 1024 bit RSA private key
.................++++++
...................................................++++++
writing new private key to 'keys\ca.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [JP]:JP　<----------ここで、build-ca.input.txt の内容を全てコピーし、右クリックして張り付ける。
State or Province Name (full name) [OSAKA]:OSAKA
Locality Name (eg, city) [MINOU]:MINO
Organization Name (eg, company) [OpenVPN]:OpenVPN
Organizational Unit Name (eg, section) []:
Common Name (eg, your name or your server's hostname) []:OpenVPN-CA
Email Address [abuse@example.jp]:abuse@example.jp

C:\Program Files\OpenVPN\easy-rsa>build-key-server server　<---サーバー証明書と鍵の作成。
Loading 'screen' into random state - done
Generating a 1024 bit RSA private key
.......................++++++
.........................++++++
writing new private key to 'keys\server.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [JP]:JP　<----------ここで、build-key-server.input.txt の内容を全てコピーし、右クリックして張り付ける。
State or Province Name (full name) [OSAKA]:OSAKA
Locality Name (eg, city) [MINOU]:MINO
Organization Name (eg, company) [OpenVPN]:OpenVPN
Organizational Unit Name (eg, section) []:10.8.0.0/24
Common Name (eg, your name or your server's hostname) []:server
Email Address [abuse@example.jp]:abuse@example.jp

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
Using configuration from openssl.cnf
Loading 'screen' into random state - done
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
countryName :PRINTABLE:'JP'
stateOrProvinceName :PRINTABLE:'OSAKA'
localityName :PRINTABLE:'MINO'
organizationName :PRINTABLE:'OpenVPN'
organizationalUnitName:PRINTABLE:'10.8.0.0/24'
commonName :PRINTABLE:'server'
emailAddress :IA5STRING:'abuse@example.jp'
Certificate is to be certified until Feb 22 09:29:51 2019 GMT (3650 days)
Sign the certificate? [y/n]:y


1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated

C:\Program Files\OpenVPN\easy-rsa>build-key client1　<---クライアント1証明書と鍵1の作成。
Loading 'screen' into random state - done
Generating a 1024 bit RSA private key
...................................++++++
...........++++++
writing new private key to 'keys\client1.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [JP]:JP　<----------ここで、build-key clientA.input.txt の内容を全てコピーし、右クリックして張り付ける。
State or Province Name (full name) [OSAKA]:OSAKA
Locality Name (eg, city) [MINOU]:MINO
Organization Name (eg, company) [OpenVPN]:OpenVPN
Organizational Unit Name (eg, section) []:10.8.0.0/24
Common Name (eg, your name or your server's hostname) []:OpenVPN-client1　<---ここで、1を入力して、エンターを押す。
Email Address [abuse@example.jp]:abuse@example.jp　<---ここで、build-key clientB.input.txt の内容を全てコピーし、右クリックして張り付ける。

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
Using configuration from openssl.cnf
Loading 'screen' into random state - done
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
countryName :PRINTABLE:'JP'
stateOrProvinceName :PRINTABLE:'OSAKA'
localityName :PRINTABLE:'MINO'
organizationName :PRINTABLE:'OpenVPN'
organizationalUnitName:PRINTABLE:'10.8.0.0/24'
commonName :PRINTABLE:'OpenVPN-client1'
emailAddress :IA5STRING:'abuse@example.jp'
Certificate is to be certified until Feb 22 09:30:59 2019 GMT (3650 days)
Sign the certificate? [y/n]:y


1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated

C:\Program Files\OpenVPN\easy-rsa>build-key client2　<----------クライアント2証明書と鍵2の作成、F3キーを押して、client1を2にする。


.........................................　以下、同様に必要数のclientを作成する　.............................................



C:\Program Files\OpenVPN\easy-rsa>build-dh　<----------OpenVPNサーバー用Diffie Hellmanパラメータの作成。
Loading 'screen' into random state - done
Generating DH parameters, 1024 bit long safe prime, generator 2
This is going to take a long time
......+.....................+..................................+.....................
.............................................................+.................+.....
......................+................................................+..++*++*++*

C:\Program Files\OpenVPN\easy-rsa>