Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

FireBrick Road Warrior Certificates: Difference between revisions

FireBrick Road Warrior Certificates (view source)

Revision as of 00:00, 15 March 2017

10 bytes added ,  15 March 2017
m
clean up, typos fixed: ie: → i.e.:, eg: → e.g.: (4)
(Fix typo. Remove file renaming to the same)
m (clean up, typos fixed: ie: → i.e.:, eg: → e.g.: (4))
<indicator name="RoadW">[[File:Menu-Road-Warrior.svg|link=:Category:FireBrick_IPsec_Road_WarriorFireBrick IPsec Road Warrior|30px|Back up to the FireBrick Road Warrior Category Page]]</indicator>
= Creating Certificates =
 
There are three tools to help with setting up Road Warrior connections on the FireBrick web site. You can download these
by viewing with a browser and saving the source, or using curl or wget ege.g.:
 
<SyntaxHighlight lang=bash>
 
#First install an up to date version of bash and openssl
#*ege.g. via homebrew (once homebrew is installed, <syntaxhighlight lang="bash" inline>brew install openssl</syntaxhighlight> and then <syntaxhighlight lang="bash" inline>brew install bash</syntaxhighlight>
#Secondly, modify the make-* scripts to use the correct path, iei.e.: <syntaxhighlight lang="bash" inline>#!/usr/local/bin/bash</syntaxhighlight>
 
== Certificate Authority ==
 
Then make a certificate file, and sign it using the ''key'' file. We'll call it <tt>ca-cert.pem</tt>. This involves several attributes in the DN (Distinguished name) which mostly don't matter much for your own certificate (/C=Country, /ST=State, /L=Locality, /O=OrganisationName, /CN=CommonName). Typically you would set just the CommonName, using your home or company name
(ege.g. /CN=Acme Widget CA).
 
./make-cert CA DN="/C=GB/O=My Office/CN=example.com" KEY=ca-key.pem ca-cert.pem
 
The private key associated with the CA certificate <tt>ca-key.pem</tt> is no longer needed once it has been used to sign
the server certificate. It is a good idea to store this file in a safe place (ege.g. on a memory stick in a secure location), and
remove it from any networked machine. It can of course be retrieved and reused if you wish to make further server
certificates using the same CA certificate.
 
 
[[Category:FireBrick_IPsec_Road_WarriorFireBrick IPsec Road Warrior|Certificates]]
Reedy
editor
698

edits

Retrieved from ‘http://support.aa.net.uk/Special:MobileDiff/11972’