First of all: Read the fckn manual.
Preparing the server
# ./easyrsa init-pki # ./easyrsa build-ca nopass # ./easyrsa gen-req SERVERID nopass # ./easyrsa sign-req server SERVERID # ./easyrsa gen-crl # ./easyrsa gen-dh
Preparing a client
# ./easyrsa genreq CLIENTID # ./easyrsa sign-req client CLIENTID
Revoking a client
# ./easyrsa revoke CLIENTID # ./easyrsa gen-crl
You run into problems? Check both servers AND CLIENTS log files.