Using the management interface to list PKCS#11 certificates

This recipe will demonstrate how to list the available certificates using the management interface on the client side. Although no particular network layout is required, we have to set up a working VPN connection before we can fully use the management interface.

Getting ready

We use the following network layout:

Keep the hardware token from the first recipe at hand. For this recipe, the server computer was running CentOS 5 Linux and OpenVPN 2.1.1. The client was running Fedora 12 Linux and OpenVPN 2.1.1. Keep the server configuration file basic-udp-server.conf from the Chapter 2 recipe, Server-side routing at hand.

How to do it...

1. Start the server using the configuration file basic-udp-server.conf:

   [root@server]# openvpn --config basic-udp-server.conf
   

2. Next, create the client configuration file:

   client
   proto udp
   remote openvpnserver.example.com
   
   port 1194
   
   dev tun
   nobind
   
   ca       /etc/openvpn/cookbook/ca.crt
   tls-auth /etc/openvpn/cookbook...