Question: Are openvpn CA keys generated on first boot?

[Phk]

Hello guys,

Title says all. So, after flashing a new build I noticed I have new CA\Server Keys in OpenVPN, so, the router doesn't keep the previous keys.
My question here is, are these new keys built-in the new ROM image, or are they generated in first boot, and unique per each device?

Thanks

 

[RMerlin]

They are generated when the OpenVPN server instance is enabled for the first time, or when it's enabled and there are no valid certificates.

The only reasons for losing your key/certs after flashing a firmware would be if you are coming from a very old version, or if the content of your JFFS partition got lost/corrupted.