vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-10-26 08:41:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

Op-mode:Added information about import to pki functionality

Browse Source
This commit is contained in:
srividya0208 2024-02-20 12:05:12 -05:00
parent ef69ba431c
commit e93c4723c7
1 changed files with 31 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
docs/configuration/pki/index.rst
View File

@ -118,12 +118,12 @@ OpenVPN
.. opcmd:: generate pki openvpn shared-secret .. opcmd:: generate pki openvpn shared-secret
Genearate a new OpenVPN shared secret. The generated secred is the output to Genearate a new OpenVPN shared secret. The generated secret is the output to
the console. the console.
.. opcmd:: generate pki openvpn shared-secret install <name> .. opcmd:: generate pki openvpn shared-secret install <name>
Genearate a new OpenVPN shared secret. The generated secred is the output to Genearate a new OpenVPN shared secret. The generated secret is the output to
the console. the console.
.. include:: pki_cli_import_help.txt .. include:: pki_cli_import_help.txt
@ -248,6 +248,35 @@ certificates used by services on this router.
If CA is present, this certificate will be included in generated CRLs If CA is present, this certificate will be included in generated CRLs
Import files to PKI format
--------------------------
VyOS provides this utility to import existing certificates/key files directly
into PKI from op-mode. Previous to VyOS 1.4, certificates were stored under the
/config folder permanently and will be retained post upgrade.
.. opcmd:: import pki ca <name> file <Path to CA certificate file>
Import the public CA certificate from the defined file to VyOS CLI.
.. opcmd:: import pki ca <name> key-file <Path to private key file>
Import the CAs private key portion to the CLI. This should never leave the
system as it is used to decrypt the data. The key is required if you use
VyOS as your certificate generator.
.. opcmd:: import pki certificate <name> file <path to certificate>
Import the certificate from the file to VyOS CLI.
.. opcmd:: import pki certificate <name> key-file <path to private key>
Import the private key of the certificate to the VyOS CLI. This should never
leave the system as it is used to decrypt the data.
.. opcmd:: import pki openvpn shared-secret <name> file <path to OpenVPN secret key>
Import the OpenVPN shared secret stored in file to the VyOS CLI.
ACME ACME
^^^^ ^^^^