README.md in ovpn-key-0.7.2 vs README.md in ovpn-key-0.7.3
- old
+ new
@@ -10,13 +10,16 @@
It supports encrypting `.key` files with a passphrase (there is an option to disable that).
It can be used with a non-self signed CA, just place your `ca.key` and `ca.crt` in the keys directory and skip the `--ca` step.
-It can be used to manage a non-OpenVPN CA, in that case `--zip` step will be useless, but all others will work.
+It can be used to manage a non-OpenVPN CA, in that case `--zip` and `--static` steps will be useless, but all others will work.
-For now it should be considered experimental and rather undocumented.
+OpenVPN static keys are supported partially, as they should be used for `tls-auth`/`tls-crypt` only.
+Please note that they are not encrypted regardless of `--nopass` option.
+
+For now this utility should be considered experimental and rather undocumented.
If you're brave, [let me know](https://github.com/chillum/ovpn-key/issues), where the problems are.
### Installation
1. Get [Ruby](https://www.ruby-lang.org/en/documentation/installation/)
@@ -25,14 +28,15 @@
### Usage
1. `ovpn-key --init`
2. edit `ovpn-key.yml` and `openssl.ini`
3. `ovpn-key --ca --dh --server --nopass`
-4. `ovpn-key --client somebody`
+4. `ovpn-key --client somebody [--nopass]`
5. `ovpn-key --revoke somebody`
6. add a file with `.ovpn` extension to the directory
it should contain every setting except for `cert` and `key`
-7. `ovpn-key --zip somebody-else`
+7. `ovpn-key --zip somebody-else [--nopass]`
+8. `ovpn-key --static` (generates `ta.key`)
### Configuration
Most of configuration is done in `open-vpn.key` and `openssl.ini` files in the directory.