Merge pull request #270400 from cherylmc/openssl-fix1

format

Author: prmerger-automator[bot]

articles/vpn-gateway/point-to-site-certificates-linux-openssl.md

@@ -45,10 +45,10 @@ In this section, you generate the user certificate (client certificate). Certifi
    export USERNAME=$(hostnamectl --static)
  
    # Generate a private key
-   openssl genrsa -out "${USERNAME}Key.pem" 2048 
+   openssl genrsa -out "${USERNAME}Key.pem" 2048
  
    # Generate a CSR (Certificate Sign Request)
-   openssl req -new -key "${USERNAME}Key.pem" -out "${USERNAME}Req.pem" -subj "/CN=${USERNAME}" 
+   openssl req -new -key "${USERNAME}Key.pem" -out "${USERNAME}Req.pem" -subj "/CN=${USERNAME}"
  
    # Sign the CSR using the CA certificate and CA key
    openssl x509 -req -days 365 -in "${USERNAME}Req.pem" -CA caCert.pem -CAkey caKey.pem -CAcreateserial -out "${USERNAME}Cert.pem" -extfile <(echo -e "subjectAltName=DNS:${USERNAME}\nextendedKeyUsage=clientAuth")
@@ -60,15 +60,6 @@ In this section, you generate the user certificate (client certificate). Certifi
    openssl verify -CAfile caCert.pem caCert.pem "${USERNAME}Cert.pem"
    ```
 
-## To use this client certificate on another Linux computer
-
-Each client computer requires two files in order to authenticate:
-
-* The file that contains the client key: caKey.pem
-* The file that contains the certificate public data: caCert.pem
-
-Copy both of these files and transfer them to the Linux client computer.
-
 ## Next steps
 
 To continue configuration steps, see [Point-to-site certificate authentication](vpn-gateway-howto-point-to-site-resource-manager-portal.md#uploadfile).