34 lines
637 B
Text
34 lines
637 B
Text
|
= How to generate private key and certificate for OpenVPN client
|
||
|
|
|
||
|
|
Doing this requires membership in `sysadmin-main` FAS group.
|
||
|
|
|
||
|
|
All the following commands should be ran on one of batcave hosts.
|
||
|
|
|
||
|
|
Clone `ansible-private` repo:
|
||
|
|
|
||
|
|
----
|
||
|
|
git clone /srv/git/ansible-private
|
||
|
|
----
|
||
|
|
|
||
|
|
Change into `files/vpn` subdirectory in cloned repo:
|
||
|
|
|
||
|
|
----
|
||
|
|
cd ansible-private/files/vpn
|
||
|
|
----
|
||
|
|
|
||
|
|
Run `addhost.sh` script to generate keys and cert, eg.:
|
||
|
|
|
||
|
|
----
|
||
|
|
./addhost.sh proxy33.fedoraproject.org
|
||
|
|
----
|
||
|
|
|
||
|
|
Add generated files to git index, commit, push:
|
||
|
|
|
||
|
|
----
|
||
|
|
git status
|
||
|
|
git add .
|
||
|
|
git commit -a -m "Add VPN key/cert for proxy33.fedoraproject.org"
|
||
|
|
git show
|
||
|
|
git push
|
||
|
|
----
|