77
edits
Changes
IPSec Tunnel w/CA Certs Configuration (view source)
Revision as of 00:01, 28 June 2024
, Friday at 00:01no edit summary
- File Type: '''''CA'''''
- File Type: '''''CA'''''
- Key Size: `1024`
- Key Size: '''''1024'''''
- Name (CN): `CAIPSec` // This can be whatever name you choose.
- Name (CN): '''''CAIPSec''''' // This can be whatever name you choose.
- Subject Information: `Toggled On` // It is recommended to fill out at least Country Code, State/Province and Organization Name.
- Subject Information: '''''Toggled On''''' // It is recommended to fill out at least Country Code, State/Province and Organization Name.
- Country Code (CC): `US` // Fill your country code
- Country Code (CC): '''''US''''' // Fill your country code
- State or Province Name (ST): `TX` // Fill your State/Province name
- State or Province Name (ST): '''''TX''''' // Fill your State/Province name
- Locality Name (L): `CAIPSec` // Fill your locality name, or at least a recognizable name for your CA
- Locality Name (L): '''''CAIPSec''''' // Fill your locality name, or at least a recognizable name for your CA
- Organization Name (O): `CAIPSec` // Fill your Organization name
- Organization Name (O): '''''CAIPSec''''' // Fill your Organization name
- Organizational Unit Name (OU): `CAIPSEC` // Fill your specific Unit Name
- Organizational Unit Name (OU): '''''CAIPSEC''''' // Fill your specific Unit Name
- `Generate` Certificate
- '''''Generate''''' Certificate
<br>
<br>
<br>
<br>
Next we need to sign the CAIPSec CA. We will be Self-Signing our own CA.
Next we need to sign the CAIPSec CA. We will be Self-Signing our own CA.
Under the `Certificate signing` configure as follows:
Under the '''Certificate signing''' configure as follows:
- Signed Certificate Name: `CAIPSec`
- Signed Certificate Name: '''''CAIPSec'''''
- Type of Certificate to Sign: `Certificate Authority`
- Type of Certificate to Sign: '''''Certificate Authority'''''
- Certificate Request File: `CAIPSec.req.pem`
- Certificate Request File: '''''CAIPSec.req.pem'''''
- Days Valid: `3650` // For this example we will use 3650 days, but you can configure this to be longer if needed. I would caution against too long of a CA.
- Days Valid: '''''3650''''' // For this example we will use 3650 days, but you can configure this to be longer if needed. I would caution against too long of a CA.
- Certificate Authority Key: `CAIPSec.key.pem`
- Certificate Authority Key: '''''CAIPSec.key.pem'''''
- Leave the rest of the configuration default
- Leave the rest of the configuration default
- `Sign`
- '''''Sign'''''
<br>
<br>
The following are the settings used for this example, but values should be changed depending on your specific needs:
The following are the settings used for this example, but values should be changed depending on your specific needs:
- File Type: `Client`
- File Type: '''''Client'''''
- Key Size: `1024`
- Key Size: '''''1024'''''
- Name (CN): `RUT1` // This can be whatever name you choose.
- Name (CN): '''''RUT1''''' // This can be whatever name you choose.
- Subject Information: `Toggled On` // It is recommended to fill out at least Country Code, State/Province and Organization Name.
- Subject Information: '''''Toggled On''''' // It is recommended to fill out at least Country Code, State/Province and Organization Name.
- Country Code (CC): `US` // Fill your country code
- Country Code (CC): '''''US''''' // Fill your country code
- State or Province Name (ST): `TX` // Fill your State/Province name
- State or Province Name (ST): '''''TX''''' // Fill your State/Province name
- Locality Name (L): `RUT1` // Fill your locality name, or at least a recognizable name for your CA
- Locality Name (L): '''''RUT1''''' // Fill your locality name, or at least a recognizable name for your CA
- Organization Name (O): `RUT1` // Fill your Organization name
- Organization Name (O): '''''RUT1''''' // Fill your Organization name
- Organizational Unit Name (OU): `RUT1` // Fill your specific Unit Name
- Organizational Unit Name (OU): '''''RUT1''''' // Fill your specific Unit Name
- `Generate` Certificate
- '''''Generate''''' Certificate
<br>
<br>
Under the `Certificate signing` configure as follows:
Under the `Certificate signing` configure as follows:
- Signed Certificate Name: `RUT1`
- Signed Certificate Name: '''''RUT1'''''
- Type of Certificate to Sign: `Client Certificate`
- Type of Certificate to Sign: '''''Client Certificate'''''
- Certificate Request File: `RUT1.req.pem`
- Certificate Request File: '''''RUT1.req.pem'''''
- Days Valid: `3650`
- Days Valid: '''''3650'''''
- Certificate Authority File: `CAIPSec.cert.pem`
- Certificate Authority File: '''''CAIPSec.cert.pem'''''
- Certificate Authority Key: `CAIPSec.key.pem`
- Certificate Authority Key: '''''CAIPSec.key.pem'''''
- Leave the rest of the configuration alone
- Leave the rest of the configuration alone
- `Sign`
- '''''Sign'''''
<br>
<br>
The following are the settings used for this example, but values should be changed depending on your specific needs:
The following are the settings used for this example, but values should be changed depending on your specific needs:
- File Type: `Client`
- File Type: '''''Client'''''
- Key Size: `1024`
- Key Size: '''''1024'''''
- Name (CN): `RUT2` // This can be whatever name you choose.
- Name (CN): '''''RUT2''''' // This can be whatever name you choose.
- Subject Information: `Toggled On` // It is recommended to fill out at least Country Code, State/Province and Organization Name.
- Subject Information: '''''Toggled On''''' // It is recommended to fill out at least Country Code, State/Province and Organization Name.
- Country Code (CC): `US` // Fill your country code
- Country Code (CC): '''''US''''' // Fill your country code
- State or Province Name (ST): `TX` // Fill your State/Province name
- State or Province Name (ST): '''''TX''''' // Fill your State/Province name
- Locality Name (L): `RUT2` // Fill your locality name, or at least a recognizable name for your CA
- Locality Name (L): '''''RUT2''''' // Fill your locality name, or at least a recognizable name for your CA
- Organization Name (O): `RUT2` // Fill your Organization name
- Organization Name (O): '''''RUT2''''' // Fill your Organization name
- Organizational Unit Name (OU): `RUT2` // Fill your specific Unit Name
- Organizational Unit Name (OU): '''''RUT2''''' // Fill your specific Unit Name
- `Generate` Certificate
- '''''Generate''''' Certificate
<br>
<br>