Question: Are openvpn CA keys generated on first boot?


Occasional Visitor
Hello guys,

Title says all. So, after flashing a new build I noticed I have new CA\Server Keys in OpenVPN, so, the router doesn't keep the previous keys.
My question here is, are these new keys built-in the new ROM image, or are they generated in first boot, and unique per each device?



Asuswrt-Merlin dev
They are generated when the OpenVPN server instance is enabled for the first time, or when it's enabled and there are no valid certificates.

The only reasons for losing your key/certs after flashing a firmware would be if you are coming from a very old version, or if the content of your JFFS partition got lost/corrupted.

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!