voronind/nix
0
0
Fork 0
Code Issues 40 Pull requests Packages Projects Releases Wiki Activity

Vpn: Add a note on cert expirity configuration.

Browse source
This commit is contained in:
Dmitry Voronin 2024-11-26 20:27:53 +03:00
parent 5cfbb60b83
commit 255de1df52
Signed by: voronind
SSH key fingerprint: SHA256:3kBb4iV2ahufEBNq+vFbUe4QYfHt98DHQjN7QaptY9k
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
container/Vpn.nix
View file

@ -1,6 +1,7 @@
# easyrsa init-pki # easyrsa init-pki
# easyrsa build-ca # easyrsa build-ca
# easyrsa build-server-full <SERVER_NAME> nopass # easyrsa build-server-full <SERVER_NAME> nopass
# export EASYRSA_CERT_EXPIRE=36500
# easyrsa build-client-full <CLIENT_NAME> nopass # easyrsa build-client-full <CLIENT_NAME> nopass
# openssl dhparam -out dh2048.pem 2048 # openssl dhparam -out dh2048.pem 2048
# Don't forget to set tls hostname on the client to match SERVER_NAME *AND* disable ipv6 ? # Don't forget to set tls hostname on the client to match SERVER_NAME *AND* disable ipv6 ?