Certificates: Difference between revisions
From Bondix Wiki
No edit summary |
No edit summary |
||
Line 1: | Line 1: | ||
[[Category:Server]] | [[Category:Server]] | ||
{{Colored_box|Text=OUTDATED! If you are looking for Bondix Server certificates, please visit this page: [[Server_Certificates_with_LetsEncrypt Server Certificates}} | {{Colored_box|Text=OUTDATED! If you are looking for Bondix Server certificates, please visit this page: [[Server_Certificates_with_LetsEncrypt|Server Certificates]]}} | ||
SANE allows the use of certificates for authentication, both for server and client. | SANE allows the use of certificates for authentication, both for server and client. |
Revision as of 14:39, 12 July 2023
⚠️ | OUTDATED! If you are looking for Bondix Server certificates, please visit this page: Server Certificates |
---|
SANE allows the use of certificates for authentication, both for server and client.
Client Certificate based Authentication
When certificate based client authentication is used, it is not required to explicitly create a tunnel configuration on the server.
Server Setup
- create server certs (./ssl/create-server-certs.sh)
- create signed client cert (./ssl/create-client-cert.sh <tunnelname>)
- set root certificate in saneserver-config
Client Setup
- load cert&key pair
Server Certificate Authentication
Server Setup
- set/create ssl cert
Client Setup
- load public root key from server