Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
| install_24_4_strongswan [2026/01/11 18:52] – [Xfrm Interface Prep] system | install_24_4_strongswan [2026/01/12 06:08] (current) – [Create PKI] system | ||
|---|---|---|---|
| Line 55: | Line 55: | ||
| ------ | ------ | ||
| ===== Create PKI ===== | ===== Create PKI ===== | ||
| - | * Next we will creaate | + | * Next we will create |
| * We need to install a helper package that is part of StrongSwan first. | * We need to install a helper package that is part of StrongSwan first. | ||
| <code bash> | <code bash> | ||
| Line 62: | Line 62: | ||
| * We issue the following commands. | * We issue the following commands. | ||
| <code bash> | <code bash> | ||
| - | mkdir -p ~/pki/{cacerts, | + | mkdir -p ~/pki/{ca, |
| chmod 700 ~/pki | chmod 700 ~/pki | ||
| cd ~/pki | cd ~/pki | ||
| Line 82: | Line 82: | ||
| </ | </ | ||
| + | <WRAP center round tip 100%> | ||
| + | * StrongSwan has some very good documentation on managing certificates | ||
| + | * https:// | ||
| + | </ | ||
| + | |||
| -------- | -------- | ||
| Line 236: | Line 241: | ||
| systemctl start xfrm0 | systemctl start xfrm0 | ||
| </ | </ | ||
| + | * Everything is now prepared on the server side. | ||
| + | * We can now configure clients in APdesk and MESHdesk to route certain traffic through the IPsec tunnel. | ||
| + | * These are covered in a dedicated Wiki page. | ||