setup server

sudo apt-get update && sudo apt-get upgrade
sudo apt-get install openvpn easy-rsa
… all same until /etc/openvpn/easy-rsa/keys
cd /etc/openvpn/easy-rsa/
cp vars.example vars
vi vars
  • uncomment and modify following lines
    #set_var EASYRSA_REQ_COUNTRY    "US"
    #set_var EASYRSA_REQ_PROVINCE   "California"
    #set_var EASYRSA_REQ_CITY       "San Francisco"
    #set_var EASYRSA_REQ_ORG        "Copyleft Certificate Co"
    #set_var EASYRSA_REQ_EMAIL      ""
    #set_var EASYRSA_REQ_OU         "My Organizational Unit"
  • save and close
    ./easyrsa init-pki

when service starts and waits for password in the background use this to enter password

sudo systemd-tty-ask-password-agent --query