Home / server / Questions / 1146946
Accepted
rvh
Asked: 2023-10-31 23:46:50 +0800 CST

In OpenVPN, is the signing CA the mechanism used to validate clients and servers to each other?

  • 772

Assuming bidirectional keypair authentication with valid certificates, such as dates, etc., no tls-crypt, no CRL and no checks for common names.

Is that also the reason for using a private CA, instead of a public one?

openvpn

1 Answers

  1. Best Answer

    Not just OpenVPN - this is how PKI works, period. Your processes trust the issuing CA, so that they can be presented a certificate that they haven't seen before, they can trust that it was issued by a CA they trust.

    • 1