Infrastructure/infra-docs-fpo
1
0
Fork 0
Code Issues 100 Pull requests 6 Projects Releases Packages Wiki Activity Actions

openvpn sop: update commands with easyrsa

Browse source
This commit is contained in:
Francois Andrieu 2024-02-06 22:18:59 +00:00
parent 9e4c686587
commit 35adacc621
1 changed files with 4 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

30
modules/sysadmin_guide/pages/openvpn.adoc
View file

@ -20,27 +20,7 @@ Purpose::
=== Create/sign the keys === Create/sign the keys
From batcave01 check out the private repo: See xref:howtos:generate_openvpn_keys.adoc[How to generate private key and certificate for OpenVPN client]
....
# This is to ensure that the clone is not world-readable at any point.
RESTORE_UMASK=$(umask -p)
umask 0077
git clone /srv/git/ansible-private
$RESTORE_UMASK
cd ansible-private/vpn/openvpn
....
Next prepare your environment and run the build-key script. This example
is for host "proxy4.fedora.iad2.redhat.com":
....
. ./vars
./build-key $FQDN # ./revoke-full $FQDN to revoke keys that are no longer used.
git add .
git commit -a
git push
....
=== Create Static IP === Create Static IP
@ -122,15 +102,13 @@ RESTORE_UMASK=$(umask -p)
umask 0077 umask 0077
git clone /srv/git/ansible-private git clone /srv/git/ansible-private
$RESTORE_UMASK $RESTORE_UMASK
cd ansible-private/vpn/openvpn cd ansible-private/files/vpn
.... ....
Next prepare your environment and run the build-key script. This example Next, use the `easyrsa` command to revoke the certificate:
is for host "proxy4.fedora.iad2.redhat.com":
.... ....
. ./vars /usr/share/easy-rsa/3.0/easyrsa revoke $FQDN
./revoke-full $FQDN
git add . git add .
git commit -a git commit -a
git push git push