lsca_vpn
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| lsca_vpn [2019/10/24 05:12] – sloader | lsca_vpn [2022/09/02 15:29] (current) – sloader | ||
|---|---|---|---|
| Line 2: | Line 2: | ||
| mkdir openvpn ; cd openvpn | mkdir openvpn ; cd openvpn | ||
| # server key | # server key | ||
| - | openssl req -days 3650 -newkey rsa:2048 -keyout key -out request | + | openssl req -days 3650 -newkey rsa:4096 -keyout key -out request |
| openssl x509 -extensions v3_ca -days 3650 -CA ../ | openssl x509 -extensions v3_ca -days 3650 -CA ../ | ||
| openssl rsa -in key -out server.key | openssl rsa -in key -out server.key | ||
| rm request | rm request | ||
| # generate dh params | # generate dh params | ||
| - | openssl dhparam -out dh2048.pem 2048 | + | openssl dhparam -out dh4096.pem 4096 |
| # create HMAC authentication key file | # create HMAC authentication key file | ||
| openvpn --genkey --secret ta.key | openvpn --genkey --secret ta.key | ||
| # create client keys | # create client keys | ||
| mkdir clients ; cd clients | mkdir clients ; cd clients | ||
| - | for l in baldr hermodr | + | for l in hidden marduk slodmob srvli14 tina rommob hades |
| do | do | ||
| echo $l | echo $l | ||
| - | openssl req -days 3650 -newkey rsa:2048 -keyout $l.crp -out request | + | openssl req -days 3650 -newkey rsa:4096 -keyout $l.crp -out request |
| openssl x509 -extensions v3_ca -days 3650 -CA ../ | openssl x509 -extensions v3_ca -days 3650 -CA ../ | ||
| openssl rsa -in $l.crp -out $l.key | openssl rsa -in $l.crp -out $l.key | ||
lsca_vpn.1571893943.txt.gz · Last modified: by sloader