diff options
| author | Trygve Laugstøl <trygvis@inamo.no> | 2018-12-21 07:36:22 +0100 |
|---|---|---|
| committer | Trygve Laugstøl <trygvis@inamo.no> | 2018-12-21 07:36:22 +0100 |
| commit | 36183579aa48bd9207237ac69d666f0f222cfc1d (patch) | |
| tree | 00e6b7a4d5fc6a2e9ff2ce0a0df7c571e3b2a3b3 /ansible/experiments/strongswan/strongswan.md | |
| parent | d8b72bd2c77a362e16a2c713fe94d704c5802dc5 (diff) | |
| download | infra-36183579aa48bd9207237ac69d666f0f222cfc1d.tar.gz infra-36183579aa48bd9207237ac69d666f0f222cfc1d.tar.bz2 infra-36183579aa48bd9207237ac69d666f0f222cfc1d.tar.xz infra-36183579aa48bd9207237ac69d666f0f222cfc1d.zip | |
elasticsearch
Diffstat (limited to 'ansible/experiments/strongswan/strongswan.md')
| -rw-r--r-- | ansible/experiments/strongswan/strongswan.md | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/ansible/experiments/strongswan/strongswan.md b/ansible/experiments/strongswan/strongswan.md new file mode 100644 index 0000000..4258037 --- /dev/null +++ b/ansible/experiments/strongswan/strongswan.md @@ -0,0 +1,18 @@ +# CA certificate + + mkdir -p files/swanctl/CA + pki --gen > files/swanctl/CA/ca-key.der + pki --self \ + --in files/swanctl/CA/ca-key.der \ + --dn "C=NO, O=Trygvis IO AS, CN=Trygvis IO CA" \ + --ca > files/swanctl/CA/ca-cert.der + +# Peer certificate + + mkdir -p files/swanctl/$host/{rsa,x509} + pki --gen > files/swanctl/$host/rsa/$host-key.der + pki --pub --in files/swanctl/$host/rsa/$host-key.der | \ + pki --issue \ + --cakey files/swanctl/CA/ca-key.der \ + --cacert files/swanctl/CA/ca-cert.der \ + --dn "C=NO, O=Trygvis IO AS, CN=$host.trygvis.io" > files/swanctl/$host/x509/$host-cert.der |