We have an old server, running OpenVPN2.1 where i need to refresh all the certificates from (server and connected clients). I dived into OpenVPN and EasyRSA a bit and got a running test environment with OpenVPN2.4.4 and EasyRSA3 now. I tested to exchange the certs on the clients via the VPN and this works fine in my test setup.
Now i want to generate certificates for the live environment (OpenVPN2.1 server) and i need to be sure that OpenVPN2.1 works with EasyRSA3 certificates before i start exchanging client certificates in the live environment. When i lose the connection with the client(s) i cannot recover it as the server certificate is removed (no backup).
So concrete: Can i use certificates generated with EasyRSA3 for openvpn 2.1
I also want to update to the latest OpenVPN version (starting with the server). Can i (after i refreshed all the certificates) simply update the OpenVPN server version without break something?
So: Is OpenVPN (server) 2.4.x backwards compatible with OpenVPN 2.1 ?
Thanks for helping me in advance