wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-06-06 15:13:56 +02:00
Code Issues Projects Releases Wiki Activity

Ask users to enter the p12 password manually (#697)

Browse source
This commit is contained in:
Jack Ivanov 2017-10-18 22:15:39 +02:00 • committed by Dan Guido
parent 6b803e069f
commit ee7264f26e
2 changed files with 1 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/vpn/templates/client_windows.ps1.j2
View file

@ -1,6 +1,6 @@
function AddAlgoVPN { function AddAlgoVPN {
certutil -f -p {{ easyrsa_p12_export_password }} -importpfx .\{{ item }}.p12 certutil -f -importpfx .\{{ item }}.p12
Add-VpnConnection -name "Algo VPN {{ IP_subject_alt_name }} IKEv2" -ServerAddress "{{ IP_subject_alt_name }}" -TunnelType IKEv2 -AuthenticationMethod MachineCertificate -EncryptionLevel Required Add-VpnConnection -name "Algo VPN {{ IP_subject_alt_name }} IKEv2" -ServerAddress "{{ IP_subject_alt_name }}" -TunnelType IKEv2 -AuthenticationMethod MachineCertificate -EncryptionLevel Required
Set-VpnConnectionIPsecConfiguration -ConnectionName "Algo VPN {{ IP_subject_alt_name }} IKEv2" -AuthenticationTransformConstants GCMAES128 -CipherTransformConstants GCMAES128 -EncryptionMethod AES128 -IntegrityCheckMethod SHA384 -DHGroup ECP256 -PfsGroup ECP256 -Force Set-VpnConnectionIPsecConfiguration -ConnectionName "Algo VPN {{ IP_subject_alt_name }} IKEv2" -AuthenticationTransformConstants GCMAES128 -CipherTransformConstants GCMAES128 -EncryptionMethod AES128 -IntegrityCheckMethod SHA384 -DHGroup ECP256 -PfsGroup ECP256 -Force
} }

2
roles/vpn/templates/mobileconfig.j2
View file

@ -146,8 +146,6 @@
<string>IKEv2</string> <string>IKEv2</string>
</dict> </dict>
<dict> <dict>
<key>Password</key>
<string>{{ easyrsa_p12_export_password }}</string>
<key>PayloadCertificateFileName</key> <key>PayloadCertificateFileName</key>
<string>{{ item.0 }}.p12</string> <string>{{ item.0 }}.p12</string>
<key>PayloadContent</key> <key>PayloadContent</key>