https://wiki.ixheim.de/index.php?action=history&feed=atom&title=Openswan_zu_openswan 2026-05-15T18:53:07Z Versionsgeschichte dieser Seite in Xinux Wiki MediaWiki 1.35.1 https://wiki.ixheim.de/index.php?title=Openswan_zu_openswan&diff=8485&oldid=prev 2016-02-19T10:43:29Z

<p><span dir="auto"><span class="autocomment">Zertifikate übernehmen</span></span></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 19. Februar 2016, 10:43 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l91" >Zeile 91:</td> <td colspan="2" class="diff-lineno">Zeile 91:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  tar -xvzf paragon.tgz</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  tar -xvzf paragon.tgz</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  cp -v ca.crt /etc/ipsec.d/cacerts/xinux-ca.crt</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  cp -v ca.crt /etc/ipsec.d/cacerts/xinux-ca.crt</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>  cp -v ca.crl /etc/ipsec.d/crls/xinux-ca.<del class="diffchange diffchange-inline">crt</del></div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>  cp -v ca.crl /etc/ipsec.d/crls/xinux-ca.<ins class="diffchange diffchange-inline">crl</ins></div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  cp -v paragon.key /etc/ipsec.d/private/</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  cp -v paragon.key /etc/ipsec.d/private/</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  cp -v paragon.crt /etc/ipsec.d/certs/</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  cp -v paragon.crt /etc/ipsec.d/certs/</div></td></tr> <tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l97" >Zeile 97:</td> <td colspan="2" class="diff-lineno">Zeile 97:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  tar -xvzf tunesien.tgz</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  tar -xvzf tunesien.tgz</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  cp -v ca.crt /etc/ipsec.d/cacerts/xinux-ca.crt</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  cp -v ca.crt /etc/ipsec.d/cacerts/xinux-ca.crt</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>  cp -v ca.crl /etc/ipsec.d/crls/xinux-ca.<del class="diffchange diffchange-inline">crt</del></div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>  cp -v ca.crl /etc/ipsec.d/crls/xinux-ca.<ins class="diffchange diffchange-inline">crl</ins></div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  cp -v tunesien.key /etc/ipsec.d/private/</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  cp -v tunesien.key /etc/ipsec.d/private/</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  cp -v tunesien.crt /etc/ipsec.d/certs/</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  cp -v tunesien.crt /etc/ipsec.d/certs/</div></td></tr> <!-- diff cache key my_wiki:diff::1.12:old-8341:rev-8485 --> </table>

Thomas https://wiki.ixheim.de/index.php?title=Openswan_zu_openswan&diff=8341&oldid=prev 2016-02-11T13:25:39Z

<p><span dir="auto"><span class="autocomment">Tunnel Parameter definieren</span></span></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 11. Februar 2016, 13:25 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l42" >Zeile 42:</td> <td colspan="2" class="diff-lineno">Zeile 42:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       rightsubnet=192.168.33.0/24</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       rightsubnet=192.168.33.0/24</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       ike=3des-md5-modp1024</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       ike=3des-md5-modp1024</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>       <del class="diffchange diffchange-inline">esp</del>=3des-md5<del class="diffchange diffchange-inline">-96</del></div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>       <ins class="diffchange diffchange-inline">phase2alg</ins>=3des-md5<ins class="diffchange diffchange-inline">;modp1024</ins></div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       pfs=yes</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       pfs=yes</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       auto=start</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       auto=start</div></td></tr> <!-- diff cache key my_wiki:diff::1.12:old-8340:rev-8341 --> </table>

Thomas https://wiki.ixheim.de/index.php?title=Openswan_zu_openswan&diff=8340&oldid=prev 2016-02-11T13:08:48Z

<p><span dir="auto"><span class="autocomment">Tunnel Parameter definieren</span></span></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 11. Februar 2016, 13:08 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l38" >Zeile 38:</td> <td colspan="2" class="diff-lineno">Zeile 38:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       authby=secret</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       authby=secret</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       left=192.168.242.100</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       left=192.168.242.100</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">      leftid=192.168.242.100</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       leftsubnet=172.23.242.0/24</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       leftsubnet=172.23.242.0/24</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       right=192.168.249.121</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       right=192.168.249.121</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">      rightid=192.168.249.121</del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       rightsubnet=192.168.33.0/24</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       rightsubnet=192.168.33.0/24</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       ike=3des-md5-modp1024</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>       ike=3des-md5-modp1024</div></td></tr> <!-- diff cache key my_wiki:diff::1.12:old-6969:rev-8340 --> </table>

Thomas https://wiki.ixheim.de/index.php?title=Openswan_zu_openswan&diff=6969&oldid=prev 2015-04-15T15:08:35Z

<p></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 15. April 2015, 15:08 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l61" >Zeile 61:</td> <td colspan="2" class="diff-lineno">Zeile 61:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  ipsec auto --add par-tun</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  ipsec auto --add par-tun</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  ipsec auto --up par-tun</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  ipsec auto --up par-tun</div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">;Secrets neu einlesen</ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"> ipsec auto -rereadsecrets</ins></div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>====IPsec in Firewall eintragen====</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>====IPsec in Firewall eintragen====</div></td></tr> <!-- diff cache key my_wiki:diff::1.12:old-5424:rev-6969 --> </table>

Jan https://wiki.ixheim.de/index.php?title=Openswan_zu_openswan&diff=5424&oldid=prev 2014-10-14T15:09:02Z

<p><span dir="auto"><span class="autocomment">Zertifikate ( mit raodwarrior )</span></span></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 14. Oktober 2014, 15:09 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l148" >Zeile 148:</td> <td colspan="2" class="diff-lineno">Zeile 148:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  192.168.249.121 : RSA tunesien.key &quot;&quot;</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  192.168.249.121 : RSA tunesien.key &quot;&quot;</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>===Zertifikate ( mit <del class="diffchange diffchange-inline">raodwarrior </del>)===</div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>===Zertifikate ( mit <ins class="diffchange diffchange-inline">roadwarrior </ins>)===</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> <!-- diff cache key my_wiki:diff::1.12:old-4333:rev-5424 --> </table>

Thomas https://wiki.ixheim.de/index.php?title=Openswan_zu_openswan&diff=4333&oldid=prev 2014-05-21T18:49:55Z

<p><span dir="auto"><span class="autocomment">Zertifikate ansehen</span></span></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 21. Mai 2014, 18:49 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l101" >Zeile 101:</td> <td colspan="2" class="diff-lineno">Zeile 101:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>====Zertifikate ansehen====</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>====Zertifikate ansehen====</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>  openssl x509 -in filename.crt <del class="diffchange diffchange-inline">-noout -text</del></div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>  openssl x509 <ins class="diffchange diffchange-inline">-noout -text </ins>-in filename.crt</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>===Zertifikate (ohne roadwarrior)===</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>===Zertifikate (ohne roadwarrior)===</div></td></tr> <!-- diff cache key my_wiki:diff::1.12:old-3753:rev-4333 --> </table>

192.168.244.1 https://wiki.ixheim.de/index.php?title=Openswan_zu_openswan&diff=3753&oldid=prev 2013-11-25T13:06:16Z

<p>Die Seite wurde neu angelegt: „==Komponenten== *1 PC *1 VM ==Zielbestimmung== VPN zwischen PC und VM die Netze dahinter Tunneln ===Muss Kriterien=== *Netzwerke über Tunnel gegenseitig erre…“</p> <p><b>Neue Seite</b></p><div>==Komponenten==<br /> *1 PC<br /> *1 VM<br /> <br /> ==Zielbestimmung==<br /> <br /> VPN zwischen PC und VM die Netze dahinter Tunneln<br /> <br /> ===Muss Kriterien===<br /> <br /> *Netzwerke über Tunnel gegenseitig erreichbar<br /> <br /> ===Kann Kriterien===<br /> *PSK<br /> *Zertifikate<br /> **ohne roadwarrior<br /> **mit roadwarrior<br /> <br /> ==Umgebung==<br /> ===Software===<br /> <br /> *Ubuntu 11.04 2.6.38-8-server<br /> *Ubuntu 10.04.2 2.6.32-33-generic-pae<br /> <br /> ===Hardware===<br /> *Router mit 2 Netzwerk-Schnittstellen<br /> *ESXi Server (VMware)<br /> <br /> ==Funktionalität==<br /> *IPsec Implementierung auf beiden Seiten installieren<br /> apt-get install openswan<br /> ===Openswan konfigurieren ( PSK )===<br /> Konfiguration ist auf beiden Rechnern gleich<br /> ====Tunnel Parameter definieren====<br /> ;Tunnelkonfiguration<br /> /etc/ipsec.conf<br /> conn par-tun<br /> authby=secret<br /> left=192.168.242.100<br /> leftid=192.168.242.100<br /> leftsubnet=172.23.242.0/24<br /> right=192.168.249.121<br /> rightid=192.168.249.121<br /> rightsubnet=192.168.33.0/24<br /> ike=3des-md5-modp1024<br /> esp=3des-md5-96<br /> pfs=yes<br /> auto=start<br /> <br /> <br /> ;PSK-secret Definition<br /> <br /> # &lt;linke ID&gt; &lt;rechte ID&gt; : &lt;Type&gt; &lt;Secret&gt;<br /> 192.168.242.100 192.168.249.121 : PSK &quot;natuerliches mineralwasser&quot;<br /> <br /> ;Konfiguration laden und Tunnel starten<br /> ipsec setup --restart<br /> <br /> ;Tunnel neustarten<br /> ipsec auto --delete par-tun<br /> ipsec auto --add par-tun<br /> ipsec auto --up par-tun<br /> <br /> ====IPsec in Firewall eintragen====<br /> <br /> iptables -A FORWARD -i $LAN -o $WAN -m policy --pol ipsec --mode tunnel --dir out -j ACCEPT<br /> iptables -A FORWARD -i $WAN -o $LAN -m policy --pol ipsec --mode tunnel --dir in -j ACCEPT<br /> <br /> <br /> ===Zertifikate einrichten===<br /> ====Zertifizierungsstelle erstellen====<br /> <br /> makepki ca<br /> <br /> ====Zertifikate erstellen====<br /> <br /> makepki cert paragon<br /> makepki cert tunesien<br /> <br /> ====Zertifikate übernehmen====<br /> Auf der Zertifizierungsstelle<br /> <br /> tar -cvzf paragon.tgz ca.crt ca.crl paragon.key paragon.crt<br /> scp paragon.tgz paragon:/root<br /> tar -cvzf tunesien.tgz ca.crt ca.crl tunesien.key tunesien.crt<br /> scp tunesien.tgz tunesien:/root<br /> <br /> Auf paragon<br /> <br /> tar -xvzf paragon.tgz<br /> cp -v ca.crt /etc/ipsec.d/cacerts/xinux-ca.crt<br /> cp -v ca.crl /etc/ipsec.d/crls/xinux-ca.crt<br /> cp -v paragon.key /etc/ipsec.d/private/<br /> cp -v paragon.crt /etc/ipsec.d/certs/<br /> Auf tunesien<br /> tar -xvzf tunesien.tgz<br /> cp -v ca.crt /etc/ipsec.d/cacerts/xinux-ca.crt<br /> cp -v ca.crl /etc/ipsec.d/crls/xinux-ca.crt<br /> cp -v tunesien.key /etc/ipsec.d/private/<br /> cp -v tunesien.crt /etc/ipsec.d/certs/<br /> <br /> ====Zertifikate ansehen====<br /> openssl x509 -in filename.crt -noout -text<br /> <br /> ===Zertifikate (ohne roadwarrior)===<br /> <br /> ====Konfigurationsdateien anpassen====<br /> <br /> ;Paragon<br /> ipsec.conf<br /> conn par-tun<br /> authby=rsasig<br /> leftcert=paragon.crt<br /> left=192.168.242.100<br /> leftrsasigkey=%cert<br /> leftid=&quot;C=de, ST=rlp, L=zweibruecken, OU=edv, CN=paragon, E=hutze@xinux.de&quot;<br /> leftsubnet=172.23.242.0/24<br /> right=192.168.249.121<br /> rightid=&quot;C=de, ST=rlp, L=zweibruecken, OU=edv, CN=tunesien, E=hutze@xinux.de&quot;<br /> rightrsasigkey=%cert<br /> rightsubnet=192.168.33.0/24<br /> ike=3des-md5-modp1024<br /> esp=3des-md5-96<br /> pfs=yes<br /> auto=start<br /> <br /> ipsec.secret<br /> 192.168.242.100 : RSA paragon.key &quot;&quot;<br /> <br /> ;tunesien<br /> ipsec.conf<br /> conn par-tun<br /> authby=rsasig<br /> left=192.168.242.100<br /> leftrsasigkey=%cert<br /> leftid=&quot;C=de, ST=rlp, L=zweibruecken, OU=edv, CN=paragon, E=hutze@xinux.de&quot;<br /> leftsubnet=172.23.242.0/24<br /> rightcert=tunesien.crt<br /> right=192.168.249.121<br /> rightid=&quot;C=de, ST=rlp, L=zweibruecken, OU=edv, CN=tunesien, E=hutze@xinux.de&quot;<br /> rightrsasigkey=%cert<br /> rightsubnet=192.168.33.0/24<br /> ike=3des-md5-modp1024<br /> esp=3des-md5-96<br /> pfs=yes<br /> auto=start<br /> ipsec.secret<br /> 192.168.249.121 : RSA tunesien.key &quot;&quot;<br /> <br /> ===Zertifikate ( mit raodwarrior )===<br /> <br /> <br /> ====Server====<br /> ipsec.conf<br /> conn par-tun<br /> leftcert=paragon.crt<br /> left=192.168.242.100<br /> leftrsasigkey=%cert<br /> leftid=&quot;C=de, ST=rlp, L=zweibruecken, OU=edv, CN=paragon, E=hutze@xinux.de&quot;<br /> leftsubnet=172.23.242.0/24<br /> right=%any<br /> rightid=&quot;C=de, ST=rlp, L=zweibruecken, OU=edv, CN=tunesien, E=hutze@xinux.de&quot;<br /> rightrsasigkey=%cert<br /> rightsubnet=192.168.33.0/24<br /> ike=3des-md5-modp1536<br /> esp=3des-md5-96<br /> pfs=yes<br /> authby=rsasig<br /> auto=add<br /> <br /> ====Roadwarrior====<br /> ipsec.conf<br /> <br /> conn par-tun<br /> left=192.168.242.100<br /> leftrsasigkey=%cert<br /> leftid=&quot;C=de, ST=rlp, L=zweibruecken, OU=edv, CN=paragon, E=hutze@xinux.de&quot;<br /> leftsubnet=172.23.242.0/24<br /> right=%defaultroute<br /> rightcert=tunesien.crt<br /> rightid=&quot;C=de, ST=rlp, L=zweibruecken, OU=edv, CN=tunesien, E=hutze@xinux.de&quot;<br /> rightsubnet=192.168.33.0/24<br /> ike=3des-md5-modp1024<br /> esp=3des-md5-96<br /> pfs=yes<br /> authby=rsasig<br /> auto=start</div>

Thomas