vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-12-19 20:12:07 +01:00
Code Issues Packages Projects Releases Wiki Activity

sstp: adjust ssl certificate path

Browse Source
This commit is contained in:
Christian Poessinger 2020-03-22 11:48:31 +01:00
parent bf94e7dd7b
commit f9308dad83
1 changed files with 11 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
docs/vpn/sstp.rst
View File

@ -1,8 +1,8 @@
.. _sstp_server: .. _sstp:
########### ####
SSTP Server SSTP
########### ####
:abbr:`SSTP (Secure Socket Tunneling Protocol)` is a form of :abbr:`VPN :abbr:`SSTP (Secure Socket Tunneling Protocol)` is a form of :abbr:`VPN
(Virtual Private Network)` tunnel that provides a mechanism to transport PPP (Virtual Private Network)` tunnel that provides a mechanism to transport PPP
@ -19,9 +19,10 @@ local and RADIUS authentication.
As SSTP provides PPP via a SSL/TLS channel the use of either publically signed As SSTP provides PPP via a SSL/TLS channel the use of either publically signed
certificates as well as a private PKI is required. certificates as well as a private PKI is required.
.. note:: All certificates should be stored on VyOS under .. note:: All certificates should be stored on VyOS under ``/config/auth``. If
``/config/user-data/sstp``. If certificates are not stored unt ``/config`` certificates are not stored in the ``/config`` directory they will not be
they will not be migrated during a software update. migrated during a software update.
Self Signed CA and Certificates Self Signed CA and Certificates
=============================== ===============================
@ -248,9 +249,6 @@ Example
* Use local user `foo` with password `bar` * Use local user `foo` with password `bar`
* Client IP addresses will be provided from pool `192.0.2.0/25` * Client IP addresses will be provided from pool `192.0.2.0/25`
Use <tab> to setup the ``set ssl...``, it automatically
looks for all files and directories in ``/config/user-data/sstp``.
.. code-block:: none .. code-block:: none
set vpn sstp authentication local-users username foo password 'bar' set vpn sstp authentication local-users username foo password 'bar'
@ -259,8 +257,8 @@ looks for all files and directories in ``/config/user-data/sstp``.
set vpn sstp network-settings client-ip-settings subnet '192.0.2.0/25' set vpn sstp network-settings client-ip-settings subnet '192.0.2.0/25'
set vpn sstp network-settings name-server '10.0.0.1' set vpn sstp network-settings name-server '10.0.0.1'
set vpn sstp network-settings name-server '10.0.0.2' set vpn sstp network-settings name-server '10.0.0.2'
set vpn sstp ssl ca-cert-file 'ca.crt' set vpn sstp ssl ca-cert-file '/config/auth/ca.crt'
set vpn sstp ssl cert-file 'server.crt' set vpn sstp ssl cert-file '/config/auth/server.crt'
set vpn sstp ssl key-file 'server.key' set vpn sstp ssl key-file '/config/auth/server.key'
.. include:: ../common-references.rst .. include:: ../common-references.rst