>> having probs with certs, i.e. what --outform it wants. not finding in >> docs. tried raw, but now guessing pem. same for client and server > Use the easy-rsa stuff and it will do all the hard work for you. > http://openvpn.net/index.php/open-source/documentation/howto.html we have a pki we know and love but i am trying/disecting easy-rsa to see what it is doing randy