VPN Cert and Client Key

[bglee]

I recently installed Amahi in a virtual machine, primarily for the Openvpn component and client. I tested it today from my public library and it works well. I was wondering, however, how the client got its key. Is this the same key distributed to every user of the client software? If so, should I generate new keys to be on the safe side?

[cpg]

yes, you can generate your own keys.

if you could document it for others, that'd be great!

[bglee]

I can do that. I just want to make sure I understand what is going on. Is this accurate:
1) Certificate Authority, keys and certs are pre-packaged as part of the install (for both server and client)
2) Therefore every user of Amahi has the same set of keys, etc.

If this is accurate, a commandline script to generate a unique set of certs and keys is probably the easiest option along with instructions on how to replace the key/cert on the client.