vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-10-26 08:41:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

Minor changes and corrections

Browse Source 
Removed unnecessary crypt-key command, corrected tls configuration for LDAP and added a note to commit each PKI information before applying under the OpenVPN interface.
This commit is contained in:
3roin 2021-11-09 11:54:45 +04:00 committed by GitHub
parent 549900ec52
commit 906d804ba4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
docs/configuration/interfaces/openvpn.rst
View File

@ -305,6 +305,8 @@ closing on connection resets or daemon reloads.
set interfaces openvpn vtun10 protocol udp
Then we need to generate, add and specify the names of the cryptographic materials.
Each of the install command should be applied to the configuration and commited
before using under the openvpn interface configuration.
.. code-block:: none
@ -326,7 +328,6 @@ Then we need to generate, add and specify the names of the cryptographic materia
set interfaces openvpn vtun10 tls ca-certificate ca-1
set interfaces openvpn vtun10 tls certificate srv-1
set interfaces openvpn vtun10 tls crypt-key srv-1
set interfaces openvpn vtun10 tls dh-params dh-1
Now we need to specify the server network settings. In all cases we need to
@ -382,7 +383,6 @@ Branch 1's router might have the following lines:
set interfaces openvpn vtun10 tls ca-cert ca-1
set interfaces openvpn vtun10 tls certificate branch-1
set interfaces openvpn vtun10 tls crypt-key branch-1
Client Authentication
=====================
@ -507,10 +507,9 @@ example:
subnet 172.18.100.128/29
}
tls {
ca-cert-file /config/auth/ca.crt
cert-file /config/auth/server.crt
dh-file /config/auth/dh1024.pem
key-file /config/auth/server.key
ca-certificate ca.crt
certificate server.crt
dh-params dh1024.pem
}
}