From: Dave English Date: 2009-11-27T20:01:10+09:00 Subject: Re: creating certificates and public and private keys In message , Adam Akhtar writes >Hi im going to have to create a lot of public and private keys for >clients and would like to automate the process by using a script (in >ruby of course). > >This is for an openvpn setup and currently ive been MANUALY creating >keys with the easy-rsa bat file that comes with it but id like to >automate it. > >Is there a ruby libary available that would allow me to create public >and private keys if i already have a CA. Would openvpn recognize these >keys (are keys, keys no matter what language they are created in??? im >not hot on cryptology) > >The other option would be to just execute the bat file from my ruby >script and simulate the keyboard to respond to the various prompts. I >havent doent this before so im not sure if this is easier or harder than >above. Any tips or pointers will really help! I haven't done this myself. But the common Swiss army knife for this is OpenSSL. Ruby provides Ruby::OpenSSL. Apparently that library isn't the easiest to use, but http://rubyforge.org/projects/sslplaypen/ has examples which may help. The alternative is to use drive the openssl command line, that may be easier as there are plenty of examples for generating keys using OpenSSL. The nascent http://rubyforge.org/projects/simplessl/ used the openssl command line & might be a good starting point. Other here may well know better, of course -- Dave English - dave@lutnos.com