Generating SSL certs with ACF 1.9 - Revision history

Zcrayfish: Removed a hyperlink to a hypothetical URL.

2021-12-20T22:20:47Z

Removed a hyperlink to a hypothetical URL.

← Older revision		Revision as of 22:20, 20 December 2021
Line 28:		Line 28:

	== Configure ==		== Configure ==
	Start by browsing to your openvpn-server by entering https://{ipaddr}/ in your browser and login. The user is 'root' and the password is as entered above.		Start by browsing to your openvpn-server by entering <nowiki>https://{ipaddr}/</nowiki> in your browser and login. The user is 'root' and the password is as entered above.

	=== Certificate Authority ===		=== Certificate Authority ===

Dubiousjim: add Category:Security

2012-06-01T13:04:46Z

add Category:Security

← Older revision		Revision as of 13:04, 1 June 2012
Line 122:		Line 122:
	[[Category:Networking]]		[[Category:Networking]]
	[[Category:ACF]]		[[Category:ACF]]
			[[Category:Security]]

Dubiousjim: Categories

2012-03-24T16:51:02Z

Dubiousjim: Category:ACF

2012-03-12T07:22:25Z

Category:ACF

← Older revision		Revision as of 07:22, 12 March 2012
Line 120:		Line 120:
	mv server.pem /etc/ssl/private		mv server.pem /etc/ssl/private
	mv cacert.pem /etc/ssl/		mv cacert.pem /etc/ssl/

			[[Category:ACF]] [[Category:Networking]]

Nangel: /* x509 extensions example */ - how to add multiple dns anmes (the proper way)

2010-01-09T20:04:34Z

x509 extensions example: - how to add multiple dns anmes (the proper way)

← Older revision		Revision as of 20:04, 9 January 2010
Line 70:		Line 70:
	==== x509 extensions example ====		==== x509 extensions example ====
	[ v3_req ]		[ v3_req ]
	subjectAltName ="IP:192.168.1.1"		subjectAltName ="IP:192.168.1.1, DNS:*.alpinelinux.org, DNS:redmine.alpinelinux.com"
	~~subjectAltName ="~~DNS:~~192~~.~~168~~.1.10"
	~~'''''Note:''' that x509 settings are optional. This is just a example!''~~

	=== View ===		=== View ===

Ttrask: Script is now setup-acf, not setup-webconf

2009-11-20T14:38:58Z

Script is now setup-acf, not setup-webconf

← Older revision		Revision as of 14:38, 20 November 2009
Line 17:		Line 17:

	=== Install and configure ACF ===		=== Install and configure ACF ===
	Install the web front end to Alpine Linux, called ACF.		Install the web front end to Alpine Linux, called ACF. You will be prompted to create the password for the ACF root user.

	/sbin/setup-~~webconf~~		/sbin/setup-acf

	Install acf-openssl (ACF for openssl)		Install acf-openssl (ACF for openssl)
Line 29:		Line 29:

	== Configure ==		== Configure ==
	Start by browsing to your openvpn-server by entering https://{ipaddr}/ in your browser and login.~~<BR>~~		Start by browsing to your openvpn-server by entering https://{ipaddr}/ in your browser and login. The user is 'root' and the password is as entered above.
	~~'''''Note:~~''~~' Most older Alpine versions has a default account (user=alpine /~~ password~~=test123)''~~

	=== Certificate Authority ===		=== Certificate Authority ===

Mhavela: /* View */ Rephrazing

2009-08-06T12:53:14Z

View: Rephrazing

← Older revision		Revision as of 12:53, 6 August 2009
Line 76:		Line 76:

	=== View ===		=== View ===
	The {View} tab gives you the possibility to ~~view and modify~~		The {View} tab gives you the possibility to:
	* View/Approve/Delete pending certificate requests		* View/Approve/Delete pending certificate requests
	* View/Download/Renew/Revoke/Delete approved certificates		* View/Download/Renew/Revoke/Delete approved certificates

Mhavela: User friendly notes and fixing some typo

2009-08-06T12:50:28Z

User friendly notes and fixing some typo

← Older revision		Revision as of 12:50, 6 August 2009
Line 61:		Line 61:
	* Locality Name (e.g. city)		* Locality Name (e.g. city)
	* Organization Name		* Organization Name
	* Common Name (eg, the certificate CN)		* Common Name (eg, the certificate CN) '''<<< This name should be unique for this certificate'''
	* Email Address		* Email Address
	* Multiple Organizational Unit Name (eg, division)		* Multiple Organizational Unit Name (eg, division)
Line 73:		Line 73:
	subjectAltName ="IP:192.168.1.1"		subjectAltName ="IP:192.168.1.1"
	subjectAltName ="DNS:192.168.1.10"		subjectAltName ="DNS:192.168.1.10"
			'''''Note:''' that x509 settings are optional. This is just a example!''

	=== View ===		=== View ===
Line 86:		Line 87:

	==== Download the .pfx ====		==== Download the .pfx ====
	For each approved certificate you can download ad .pfx file containing the certificate.<BR>		For each approved certificate you can download a .pfx file containing the certificate.<BR>
	With this .pfx you can extract the certs that you will need.		With this .pfx you can extract the certs that you will need.

Mhavela: /* Configure */ Removing notes on "Change default Password" because default accounts are removed

2009-08-06T12:14:35Z

Configure: Removing notes on "Change default Password" because default accounts are removed

← Older revision		Revision as of 12:14, 6 August 2009
Line 31:		Line 31:
	Start by browsing to your openvpn-server by entering https://{ipaddr}/ in your browser and login.<BR>		Start by browsing to your openvpn-server by entering https://{ipaddr}/ in your browser and login.<BR>
	'''''Note:''' Most older Alpine versions has a default account (user=alpine / password=test123)''		'''''Note:''' Most older Alpine versions has a default account (user=alpine / password=test123)''

	~~=== Change default username/password ===~~
	~~Start by changing the default username/password ('User management' menu).<BR>~~
	~~Also make sure to create yourself an account.~~

	=== Certificate Authority ===		=== Certificate Authority ===

Ttrask: Grammar

2009-08-05T19:14:52Z

Grammar

← Older revision		Revision as of 19:14, 5 August 2009
Line 10:		Line 10:

	==Installation Process==		==Installation Process==
	This will somewhat guide you through the process of creating this type of server.<BR>It is suggested to ~~not~~ host this on ~~you~~ VPN gateway but use another machine to generate your certificates.		This will somewhat guide you through the process of creating this type of server.<BR>It is suggested not to host this on your VPN gateway but to use another machine to generate your certificates.

	=== Prepare hardware and install Alpine ===		=== Prepare hardware and install Alpine ===
Line 40:		Line 40:
	It should give you a page with 'System info' and a lot of red error messages.		It should give you a page with 'System info' and a lot of red error messages.

	Click on the [Configure] button at the page to generate ~~som~~ initial configuration.		Click on the [Configure] button at the bottom of the page to generate some initial configuration.

	Go to the {Edit Defaults} tab and enter the values you want to become default (this information appears when you are creating new certificate requests).<BR>		Go to the {Edit Defaults} tab and enter the values you want to become default (this information appears when you are creating new certificate requests).<BR>
Line 54:		Line 54:

	'''''Note:''' This action can only be done once. In the future, the {Status} page will show the CA-information.''<BR>		'''''Note:''' This action can only be done once. In the future, the {Status} page will show the CA-information.''<BR>
	''The [Generate] button ~~doesn't~~ exist no more.''		''The [Generate] button will not exist any more.''

	=== Request Form ===		=== Request Form ===
Line 61:		Line 61:
	Fill in your values in the fields and finish your request with [Submit].		Fill in your values in the fields and finish your request with [Submit].

	Provided Fields:		Provided Fields (based upon the default cnf file):
	* Country Name (2 letter abreviation)		* Country Name (2 letter abreviation)
	* Locality Name (e.g. city)		* Locality Name (e.g. city)

← Older revision		Revision as of 16:51, 24 March 2012
Line 1:		Line 1:
	~~=Creating SSL certs using ACF=~~
	You are in need of creating certificate for remote persons. You might use something like openvpn or racoon for your vpn services.<BR>		You are in need of creating certificate for remote persons. You might use something like openvpn or racoon for your vpn services.<BR>
	But wouldn't it be nice to have some sort of way to...		But wouldn't it be nice to have some sort of way to...
Line 121:		Line 120:
	mv cacert.pem /etc/ssl/		mv cacert.pem /etc/ssl/

	[[Category:~~ACF~~]] [[Category:~~Networking~~]]		[[Category:Networking]]
			[[Category:ACF]]