How to get an SSL certificate for SSTP VPN Mikrotik?

Question

VPN

Greetings, there is a need for a VPN and settled on SSTP, there is an excellent tutorial https://www.youtube.com/watch?v=RBkCIwSGsuU .
And a tutorial on how to install a VPN with certificates https://www.youtube.com/watch?v=QhEGvN1pWQQ&

But installing a certificate for each user is long and dreary, and the question arose of how and where to connect external certificates to MikroTik and use for SSTP to the user could simply connect with the necessary parameters. Without shamanism with certificates.
Can I use Cloudflare or do I need to buy from conditional Comodo or Symantec? And which one is more reliable.

Answer 1

But put a certificate on each user

You just need one valid ssl certificate from the sstp server side. Validity is determined by the presence of the root certificate on the client device.

Can I use Cloudflare or do I need to buy from conditional

You can take from anyone you want and whoever is a valid CA for your clients. At least letsenkrip reissue every 3 months.

and use for SSTP so that the user can simply connect with the necessary parameters. Without shamanism with certificates.

I've been using this system successfully for 5 years.

Answer 2

sense of certificates of users just that nobody except users has access to them... so in any way, certificates should be transferred to users
I for example refused SSTP, I use OVPN. I have an autoinstaller that installs the desired version of the client + takes the necessary config + certificate by stupid copying from FTP and puts it where it needs to be
. But I have it under Linux)

Answer 3

What do you think the user certificate is for?