ACM

.\EasyRSA-Start.bat

./easyrsa init-pki

./easyrsa build-ca nopass

./easyrsa --san=DNS:server build-server-full server nopass

./easyrsa build-client-full client1.domain.tld nopass

mkdir C:\vpn copy pki\ca.crt C:\vpn copy pki\issued\server.crt C:\vpn copy pki\private\server.key C:\vpn copy pki\issued\client1.domain.tld.crt C:\vpn copy pki\private\client1.domain.tld.key C:\vpn cd C:\vpn

aws acm import-certificate \ --certificate fileb://server.crt \ --private-key fileb://server.key \ --certificate-chain fileb://ca.crt

aws acm import-certificate \ --certificate fileb://client1.domain.tld.crt \ --private-key fileb://client1.domain.tld.key \ --certificate-chain fileb://ca.crt