yohan/docker-OpenVPN-server-stack
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add more certs generation. Update README.

Browse Source
This commit is contained in:
yohan 2021-12-12 01:21:32 +01:00
parent 57fc9ae7f7
commit 132f86d659
2 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
README
View File

@ -1,7 +1,7 @@
Certificates creation: The file ca.key can only be found in the encrypted archive for secrets.
./create_conf.sh
Then store the directory conf/ in the encrypted archive for secrets. Certificates are created as below and the directory conf is stored in the encrypted archive for secrets:
./create_conf.sh
Two docker-compose files are provided: one in host mode and one for regular docker network. Two docker-compose files are provided: one in host mode and one for regular docker network.

4
create_conf.sh
View File

@ -13,9 +13,11 @@ openssl x509 -req -days 3650 -CA ca.crt -CAkey ca.key -CAcreateserial -extension
openssl req -nodes -new -keyout client2.key -out client2.csr -subj "/C=FR/O=scimetis/CN=serveur-appart.scimetis.net" -reqexts usr_cert -config ../openssl.conf openssl req -nodes -new -keyout client2.key -out client2.csr -subj "/C=FR/O=scimetis/CN=serveur-appart.scimetis.net" -reqexts usr_cert -config ../openssl.conf
openssl x509 -req -days 3650 -CA ca.crt -CAkey ca.key -CAcreateserial -extensions usr_cert -extfile ../openssl.conf -in client2.csr -out client2.crt openssl x509 -req -days 3650 -CA ca.crt -CAkey ca.key -CAcreateserial -extensions usr_cert -extfile ../openssl.conf -in client2.csr -out client2.crt
NAME=modane for NAME in modane Y10
do
openssl req -nodes -new -keyout ${NAME}.key -out ${NAME}.csr -subj "/C=FR/O=scimetis/CN=${NAME}.scimetis.net" -reqexts usr_cert -config ../openssl.conf openssl req -nodes -new -keyout ${NAME}.key -out ${NAME}.csr -subj "/C=FR/O=scimetis/CN=${NAME}.scimetis.net" -reqexts usr_cert -config ../openssl.conf
openssl x509 -req -days 3650 -CA ca.crt -CAkey ca.key -CAcreateserial -extensions usr_cert -extfile ../openssl.conf -in ${NAME}.csr -out ${NAME}.crt openssl x509 -req -days 3650 -CA ca.crt -CAkey ca.key -CAcreateserial -extensions usr_cert -extfile ../openssl.conf -in ${NAME}.csr -out ${NAME}.crt
done
chcon -R -u system_u -r object_r -t svirt_sandbox_file_t ./ chcon -R -u system_u -r object_r -t svirt_sandbox_file_t ./
mkdir keys mkdir keys