yohan/docker-OpenVPN-server-stack
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3 Commits 1 Branch 0 Tags 31 KiB
Shell 100%
e4ca53ae54
Go to file
yohan e4ca53ae54 Moved image building from docker-compose to startup script.
2020-02-26 17:43:43 +01:00
.gitignore Initial commit. 2019-04-14 18:34:38 +02:00
create_conf.sh Generalization. 2019-12-31 20:46:17 +01:00
docker-compose.yml Moved image building from docker-compose to startup script. 2020-02-26 17:43:43 +01:00
docker-compose.yml-subnet Generalization. 2019-12-31 20:46:17 +01:00
down.sh Moved image building from docker-compose to startup script. 2020-02-26 17:43:43 +01:00
openssl.conf Initial commit. 2019-04-14 18:34:38 +02:00
README Generalization. 2019-12-31 20:46:17 +01:00
start_or_update.sh Moved image building from docker-compose to startup script. 2020-02-26 17:43:43 +01:00
stop.sh Moved image building from docker-compose to startup script. 2020-02-26 17:43:43 +01:00
vars Generalization. 2019-12-31 20:46:17 +01:00

README 

Certificates creation:
./create_conf.sh

Then store the directory conf/ in the encrypted archive for secrets.

Two docker-compose files are provided: one in host mode and one for regular docker network.

References:
https://stackoverflow.com/questions/17089889/openssl-x509v3-extended-key-usage
https://forums.openvpn.net/viewtopic.php?t=7484
https://serverfault.com/questions/785108/why-does-openvpn-give-the-error-unsupported-certificate-purpose-for-an-interm
https://security.stackexchange.com/questions/74345/provide-subjectaltname-to-openssl-directly-on-the-command-line
https://github.com/openssl/openssl/issues/6481