Skip to content

Instantly share code, notes, and snippets.

@Shulyaka

Shulyaka/password-agent.md

Created September 26, 2019 18:11
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save Shulyaka/ac366dcc1e21d9b5bf3b14a528aab8da to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save Shulyaka/ac366dcc1e21d9b5bf3b14a528aab8da to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. Shulyaka created this gist Sep 26, 2019.
    29 changes: 29 additions & 0 deletions password-agent.md
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,29 @@
    server:
    ```
    turris-cagen new_ca password_agent gen_ca gen_server shulyaka.org.ru
    turris-cagen switch password_agent gen_client denis
    turris-cagen-status password_agent
    ```
    copy /etc/lighttpd/conf.d/password_agent.conf
    copy /www/cgi-bin/password_agent.sh
    copy /etc/config/password_agent
    copy /etc/init.d/password_agent
    fix /etc/ssl/ca/password_agent/01.pem
    ```
    chmod +x /www/cgi-bin/password_agent.sh
    chmod +x /etc/init.d/password_agent
    /etc/init.d/password_agent enable
    /etc/init.d/lighttpd restart
    ```

    client:
    copy /etc/systemd/system/[email protected]
    copy /usr/lib/dracut/modules.d/60network_password_agent/module-setup.sh
    ```
    sudo scp shulyaka.org.ru:/etc/ssl/ca/password_agent/02.crt /etc/pki/tls/certs/network_password_agent.crt
    sudo scp shulyaka.org.ru:/etc/ssl/ca/password_agent/02.key /etc/pki/tls/private/network_password_agent.key
    sudo scp shulyaka.org.ru:/etc/ssl/ca/password_agent/ca.crt /etc/pki/ca-trust/source/anchors/ca.crt
    sudo update-ca-trust
    sudo systemctl enable [email protected]:1443.service
    sudo dracut -v -f
    ```