Certificates: Difference between revisions
From Bondix Wiki
No edit summary |
No edit summary |
||
| Line 1: | Line 1: | ||
[[Category:Server]] | [[Category:Server]] | ||
{{Colored_box|Text=OUTDATED! If you | {{Colored_box|Text=OUTDATED! If you want to know how to configure the SSL certificate on your own Bondix server, please visit this page: [[Server_Certificates_with_LetsEncrypt|Server Certificates]]}} | ||
SANE allows the use of certificates for authentication, both for server and client. | SANE allows the use of certificates for authentication, both for server and client. | ||
Revision as of 14:41, 12 July 2023
| ⚠️ | OUTDATED! If you want to know how to configure the SSL certificate on your own Bondix server, please visit this page: Server Certificates |
|---|
SANE allows the use of certificates for authentication, both for server and client.
Client Certificate based Authentication
When certificate based client authentication is used, it is not required to explicitly create a tunnel configuration on the server.
Server Setup
- create server certs (./ssl/create-server-certs.sh)
- create signed client cert (./ssl/create-client-cert.sh <tunnelname>)
- set root certificate in saneserver-config
Client Setup
- load cert&key pair
Server Certificate Authentication
Server Setup
- set/create ssl cert
Client Setup
- load public root key from server
