[Openvpn-users] Migrating OpenVPN server - easyrsa question...

[Bo B. <bo....@gm...>]

So I have migrated my old Ubuntu Server 20.04.1 to version 24.04.1 and then to
new hardware on a new install of Ubuntu version 24.04.1.

The hardware migration was done as a fresh Ubuntu install followed by installing
the support for all the functions handled by the server (Apache and Subversion
among others) and migrating the configuration files.

Now I have come to the OpenVPN part and regarding the infrastructure to manage
the server logins and certs etc I have this question:

On the old server I have migrated over the years through easyrsa versions up to
3.1.5, which is what is now used there.

Can I just copy over the directory tree in $HOME/openvpn where all the
management stuff resides and then replace easyrsa with the now latest version
from Github (3.2.2) without editing my scripts that use easyrsa?

I.e. has there been some functional change regarding the way to use easyrsa
between those versions?

My options are:
---------------
1) Just transfer the full content of the openvpn dir from the old to the new
server as is.

2) Transfer as above but then replace easyrsa with the most recent version.

The OpenVPN server's active crypto files are *copies* which are located in dir
/etc/openvpn/keys and those I believe can be transferred as is to the new system
and it will work as needed.

But when creating new user logins and perhaps when upgrading the certs before
they expire I need a working easyrsa and the original crypto files...

Any advice appreciated!


-- 
Bo Berglund
Developer in Sweden