diff options
| author | Trygve Laugstøl <trygvis@inamo.no> | 2018-09-19 19:29:18 +0200 |
|---|---|---|
| committer | Trygve Laugstøl <trygvis@inamo.no> | 2018-09-19 19:29:18 +0200 |
| commit | f400516745aee13ee55e59623717e82619818c10 (patch) | |
| tree | 746f88a98b549b4c7f63ac9f6627b63f97a3512e /ansible/strongswan-experiment/strongswan.md | |
| parent | 8987415a10506bd823fd24fc78e0699608250a3b (diff) | |
| download | infra-f400516745aee13ee55e59623717e82619818c10.tar.gz infra-f400516745aee13ee55e59623717e82619818c10.tar.bz2 infra-f400516745aee13ee55e59623717e82619818c10.tar.xz infra-f400516745aee13ee55e59623717e82619818c10.zip | |
o Adding strongswan experiment.
Diffstat (limited to 'ansible/strongswan-experiment/strongswan.md')
| -rw-r--r-- | ansible/strongswan-experiment/strongswan.md | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/ansible/strongswan-experiment/strongswan.md b/ansible/strongswan-experiment/strongswan.md new file mode 100644 index 0000000..4258037 --- /dev/null +++ b/ansible/strongswan-experiment/strongswan.md @@ -0,0 +1,18 @@ +# CA certificate + + mkdir -p files/swanctl/CA + pki --gen > files/swanctl/CA/ca-key.der + pki --self \ + --in files/swanctl/CA/ca-key.der \ + --dn "C=NO, O=Trygvis IO AS, CN=Trygvis IO CA" \ + --ca > files/swanctl/CA/ca-cert.der + +# Peer certificate + + mkdir -p files/swanctl/$host/{rsa,x509} + pki --gen > files/swanctl/$host/rsa/$host-key.der + pki --pub --in files/swanctl/$host/rsa/$host-key.der | \ + pki --issue \ + --cakey files/swanctl/CA/ca-key.der \ + --cacert files/swanctl/CA/ca-cert.der \ + --dn "C=NO, O=Trygvis IO AS, CN=$host.trygvis.io" > files/swanctl/$host/x509/$host-cert.der |