OpenVPN Server and Windows CA?

Question

openvpn

Good afternoon!
It is necessary to make the following bundle work:
Windows Server 2012 R2 domain controller, CA on it;
OpenVPN server on Debian;
Authorization on OpenVPN by LDAP and keys, keys are created on CA;
OpenVPN clients are not in a domain.
Is this scheme workable?
I can't find any proper instructions for this.

Answer 1

Is this scheme workable?

Quite.
There is an article on Habré with a very detailed description of setting up CA and generating keys. The only thing is that Windows is not used there, but if you have your own Windows CA, then this should not be a problem. Then copy the generated keys and start the OpenVPN server.
In general, I advise you to start setting up OpenVPN itself according to my article, because. on Habré, it is very complicated and confusing for a beginner.
Total:
As for CA, keys and certificates - see the article on Habré
Setting up OpenVPN - here
Authorization in AD - here