The detail in here is great. If you just want to generate and sign certs with a minimum of hassle though, I recommend easy-rsa from OpenVPN: http://openvpn.net

The detail in here is great. If you just want to generate and sign certs with a minimum of hassle though, I recommend easy-rsa from OpenVPN: http://openvpn.net/index.php/open-source/documentation/miscellaneous/77-rsa-key-management.html http://openvpn.net/index.php/open-source/documentation/misce... I'm also curious to hear about what others use to automate this stuff.