{"id":1322,"date":"2018-12-04T14:01:30","date_gmt":"2018-12-04T14:01:30","guid":{"rendered":"https:\/\/mchmelar.cz\/?p=1322"},"modified":"2018-12-04T14:01:30","modified_gmt":"2018-12-04T14:01:30","slug":"technology-13","status":"publish","type":"post","link":"https:\/\/kb.mchmelar.cz\/?p=1322","title":{"rendered":"Technology 13"},"content":{"rendered":"

goo.gl\/KdSCtt
\nSigning certificate
\n <\/p>\n

URL\u00a0 of this doc is\u00a0\u00a0<\/span>https:\/\/pad.koodur.com\/p\/x509<\/a><\/span><\/div>\n
<\/div>\n
Lab assignment:<\/span><\/div>\n
\u00a0\u00a0\u00a0\u00a0<\/span><\/div>\n
\u00a0\u00a0\u00a0 – Generate RSA keypair and certificate signing request on your laptop<\/span><\/div>\n
\u00a0\u00a0\u00a0 – Send CSR to lauri.vosandi@gmail.com<\/span><\/div>\n
\u00a0\u00a0\u00a0 – Install one of following OpenVPN options<\/span>\u00a0below<\/span><\/div>\n
\u00a0\u00a0\u00a0 – Try to compose OpenVPN configuration file based on the bits and pieces from slides<\/span><\/div>\n
\u00a0\u00a0\u00a0 – Wait for Lauri to sign the certificate<\/span><\/div>\n
\u00a0\u00a0\u00a0 – Download CA certificate from\u00a0<\/span>http:\/\/ca9.certidude.rocks\/api\/certificate\/<\/a><\/span><\/div>\n
\u00a0\u00a0\u00a0 – Verify that you got what I have via some other channel, eg ask me for MD5 checksum of the CA certifcate file<\/span><\/div>\n
\u00a0\u00a0\u00a0 – Install signed certificate and CA certificate alongside generated RSA keypair<\/span><\/div>\n
\u00a0\u00a0\u00a0 – Start OpenVPN<\/span><\/div>\n
<\/div>\n
On Windows install just OpenVPN community edition<\/span><\/div>\n
On\u00a0<\/span>Linux install: apt install network-manager-openvpn-gnome && systemctl restart network-manager<\/span><\/div>\n
On\u00a0<\/span>Mac install Tunnelblick<\/span><\/div>\n
<\/div>\n
<\/div>\n
On Ubuntu\/Kali\/Mac\/whatever UNIX, replace lauri with your name in *lowercase*!<\/span><\/div>\n
<\/div>\n
openssl genrsa -out host_key.pem 2048<\/span><\/div>\n
openssl req -new -sha384 -subj “\/CN=lauri” -key host_key.pem -out host_req.pem<\/span><\/div>\n
<\/div>\n
# Inspection<\/span><\/div>\n
openssl req -in host_req.pem\u00a0 -text -noout<\/span><\/div>\n
openssl verify … # to check whether the certificate was correctly signed by the CA keypair<\/span><\/div>\n
<\/div>\n
<\/div>\n
<\/div>\n
<\/div>\n
<\/div>\n
<\/div>\n
<\/div>\n
On Windows to create CSR run following in PowerShell:<\/span><\/div>\n
<\/div>\n
NAME=your-name-goes-here<\/span><\/div>\n
<\/div>\n
@”<\/span><\/div>\n
[NewRequest]<\/span><\/div>\n
Subject = “CN=$NAME”<\/span><\/div>\n
Exportable = FALSE<\/span><\/div>\n
KeySpec = 1<\/span><\/div>\n
KeyUsage = 0xA0<\/span><\/div>\n
MachineKeySet = True<\/span><\/div>\n
ProviderType = 12<\/span><\/div>\n
RequestType = PKCS10<\/span><\/div>\n
ProviderName = “Microsoft RSA SChannel Cryptographic Provider”<\/span><\/div>\n
KeyLength = 2048<\/span><\/div>\n
“@ | Out-File req.inf<\/span><\/div>\n
C:\\Windows\\system32\\certreq.exe -new -f -q req.inf <\/span><\/div>\n","protected":false},"excerpt":{"rendered":"

goo.gl\/KdSCtt Signing certificate   URL\u00a0 of this doc is\u00a0\u00a0https:\/\/pad.koodur.com\/p\/x509 Lab assignment: \u00a0\u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 – Generate RSA keypair and certificate signing request on your laptop \u00a0\u00a0\u00a0 – Send CSR to lauri.vosandi@gmail.com \u00a0\u00a0\u00a0 – Install one of following OpenVPN options\u00a0below \u00a0\u00a0\u00a0 – Try to compose OpenVPN configuration file based on the bits and pieces from slides \u00a0\u00a0\u00a0 – Wait for Lauri to...<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[23],"tags":[],"_links":{"self":[{"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/posts\/1322"}],"collection":[{"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1322"}],"version-history":[{"count":0,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/posts\/1322\/revisions"}],"wp:attachment":[{"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1322"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1322"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1322"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}