wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-09-04 19:13:04 +02:00
Code Issues Projects Releases Wiki Activity

changes to pull request

Browse source
This commit is contained in:
Ted To 2018-09-10 09:00:30 -04:00
parent 6a12897643
commit 77e5ef9c3f
2 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
README.md
View file

@ -89,7 +89,7 @@ Certificates and configuration files that users will need are placed in the `con
### Apple Devices
**Send users their Apple Profile.** Find the corresponding mobileconfig (Apple Profile) for each user and send it to them over AirDrop or other secure means. Apple Configuration Profiles are all-in-one configuration files for iOS and macOS devices. On macOS, double-clicking a profile to install it will fully configure the VPN (user will be prompted for the p12 password printed following successful server installation). On iOS, users are prompted to install the profile as soon as the AirDrop is accepted.
**Send users their Apple Profile.** Find the corresponding mobileconfig (Apple Profile) for each user and send it to them over AirDrop or other secure means. Apple Configuration Profiles are all-in-one configuration files for iOS and macOS devices. On macOS, double-clicking a profile to install it will fully configure the VPN. On iOS, users are prompted to install the profile as soon as the AirDrop is accepted. User will be prompted for the appropriate p12 password.
**Turn on the VPN.** On iOS, connect to the VPN by opening Settings and clicking the toggle next to "VPN" near the top of the list. On macOS, connect to the VPN by opening System Preferences -> Network, finding Algo VPN in the left column and clicking "Connect." On macOS, check "Show VPN status in menu bar" to easily connect and disconnect from the menu bar.
@ -105,6 +105,7 @@ Copy your PowerShell script `windows_{username}.ps1` to the Windows client and r
```
powershell -ExecutionPolicy ByPass -File windows_{username}.ps1 -Add
```
User will be prompted for the appropriate p12 password.
For a manual installation, see the [Windows setup instructions](/docs/client-windows.md).
@ -137,6 +138,8 @@ One common use case is to let your server access your local LAN without going th
type=pass # passthrough
auto=route # no need to ipsec up lan-passthrough
These instructions also work for Debian stretch provided that `libstrongswan-standard-plugins` is substituted for `strongswan-plugin-openssl` in step 1.
### Other Devices
Depending on the platform, you may need one or multiple of the following files.

2
config.cfg
View file

@ -81,7 +81,7 @@ congrats:
"# and ensure that all your traffic passes through the VPN. #"
"# Local DNS resolver {{ local_service_ip }} #"
p12_pass: |
"# The p12 and SSH keys password for all regular users is {{ p12_export_password }} #"
"# The p12 and SSH keys password for the users just created is {{ p12_export_password }} #"
ca_key_pass: |
"# The CA key password is {{ CA_password }} #"
ssh_access: |