wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-06-07 15:43:54 +02:00
Code Issues Projects Releases Wiki Activity

SAN fixed

Browse source
This commit is contained in:
Evgeniy Ivanov 2016-07-12 10:20:08 +03:00
parent e4e9ddd6ad
commit ec90d2acc7
2 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
config.cfg
View file

@ -10,10 +10,10 @@ easyrsa_ca_expire: 3650
easyrsa_cert_expire: 3650 easyrsa_cert_expire: 3650
# if True re-init all existing certificates. Boolean # if True re-init all existing certificates. Boolean
easyrsa_reinit_existent: False easyrsa_reinit_existent: True
# Domain or ip # Domain or ip
server_name: "{{ ansible_ssh_host }}" server_name: "win7.mycompany.local"
server_ip: "{{ ansible_ssh_host }}" server_ip: "{{ ansible_ssh_host }}"
users: users:

8
vpn.yml
View file

@ -48,8 +48,8 @@
- name: Install git - name: Install git
apt: name=git state=latest apt: name=git state=latest
- name: Fetch easy-rsa-ipsec repo #- name: Fetch easy-rsa-ipsec repo
git: repo=git://github.com/ValdikSS/easy-rsa-ipsec.git dest="{{ easyrsa_dir }}" #git: repo=git://github.com/ValdikSS/easy-rsa-ipsec.git dest="{{ easyrsa_dir }}"
- name: Setup the vars file from our template - name: Setup the vars file from our template
template: src=easy-rsa.vars.j2 dest={{ easyrsa_dir }}/easyrsa3/vars template: src=easy-rsa.vars.j2 dest={{ easyrsa_dir }}/easyrsa3/vars
@ -78,7 +78,7 @@
- name: Build the server pair - name: Build the server pair
shell: | shell: |
./easyrsa --subject-alt-name=DNS:{{ server_name }},IP:{{ server_ip }} build-server-full {{ server_name }} nopass ./easyrsa --subject-alt-name=DNS:{{ server_name }} build-server-full {{ server_name }} nopass
touch '{{ easyrsa_dir }}/easyrsa3/pki/server_initialized' touch '{{ easyrsa_dir }}/easyrsa3/pki/server_initialized'
args: args:
chdir: '{{ easyrsa_dir }}/easyrsa3/' chdir: '{{ easyrsa_dir }}/easyrsa3/'
@ -88,7 +88,7 @@
- name: Build the client's pair - name: Build the client's pair
shell: | shell: |
./easyrsa --subject-alt-name=DNS:{{ server_name }},IP:{{ server_ip }} build-client-full {{ item }} nopass ./easyrsa --subject-alt-name=DNS:{{ server_name }} build-client-full {{ item }} nopass
touch '{{ easyrsa_dir }}/easyrsa3/pki/{{ item }}_initialized' touch '{{ easyrsa_dir }}/easyrsa3/pki/{{ item }}_initialized'
args: args:
chdir: '{{ easyrsa_dir }}/easyrsa3/' chdir: '{{ easyrsa_dir }}/easyrsa3/'