Rechercher une page de manuel
stonevpn
Langue: en
Version: 369216 (fedora - 01/12/10)
Section: 1 (Commandes utilisateur)
NAME
stonevpn - Easy OpenVPN certificate and configuration managementSYNOPSIS
stonevpn -f filename -n commonname [ OPTIONS ]DESCRIPTION
StoneVPN allows you to manage OpenVPN certificates and create configurations for Windows and Linux machines based on a template. It can package everything into a zipfile and mail it to a user.OPTIONS
- --version
- Show program's version number and exit
- -h, --help
- Show the help message and exit
- -D, --debug
- Enable debugging information. You probably don't want to use this option as it prints quite useless information for normal usage.
- -n CNAME, --name=CNAME
- Common Name, use quotes eg.: "John Cleese"
- -f FNAME, --file=FNAME
- Write to file FNAME (no extension!)
- -o CONFS, --config=CONFS
- Create config files for [ windows | unix | mac | all ]
When supplying all StoneVPN will generate configuration files for all three Operating Systems.
- -e FPREFIX, --prefix=FPREFIX
- Prefix (almost all) generated files. For example, if you set FPREFIX to 'mycorp', generated files will look like 'mycorp-user.crt/zip/key'
- -z,--zip
- Package all generated files into a ZIP file.
- -m EMAILADDRESS, --mail=EMAILADDRESS
- Send all generated files by e-mail to EMAILADDRESS. You might want to encrypt the user's key with a password when using this method.
- -i,--free-ip
- Locate and assign free ip by parsing the OpenVPN server configuration file (more specifically the 'ifconfig-pool' line), and client configuration files within the ccd directory.
- -p,--passphrase
- Prompt for a passphrase when generating the user's private key. Leave empty to provide one on the commandline. For example:
stonevpn -f user -n "User Name" -p mysecret - -E,--extrafile
- Include extra files when generating a certificate. When also specifying the --zip option, these will be packed in the zip file. Else, they will remain in a subdirectory of the working directory, based on the given FNAME. Use the full path to the filename to be included. You can use this option multiple times:
stonevpn -f user -n "User Name" -E /path/to/file1 -E /path/to/file2 - -S,--serverip
- Use this IP address for the server when generating the configuration file, overriding the one specified in stonevpn.conf
- -r SERIAL, --revoke=SERIAL
- Revoke certificate with serial SERIAL
- -u ROUTE, --route=ROUTE
- Push extra route(s) to client by means of a client configuration file on the server. For example:
stonevpn -f user -n "User Name" -u 192.168.1.0/24You can specify multiple routes with another '-u <route>'. This will write the route(s) to /etc/openvpn/cdd/Test_User
- -l,--listrevoked
- List revoked certificates
- --crl
- Display CRL file contents
- -a,--listall
- List all certificates
- -s,--showserial
- Display current SSL serial number
- -c PRINTCERT, --printcert=PRINTCERT
- Prints information about a certficiate file
- -d,--printindex
- Prints index file
- -x EXPIREDATE, --expire=EXPIREDATE
- Certificate expires in EXPIREDATE hours/days/years instead of the default specified in the openssl.cnf. For example:
stonevpn -f user -n "User Name" -x 3h # valid for 3 hours
stonevpn -f user -n "User Name" -x 2d # same, but 2 days
stonevpn -f user -n "User Name" -x 1y # and for one year - -N,--newcrl
- Create an empty CRL file (or overwrite an existing one)
- -t,--test
- Danger, Will Robinson, Danger! test parameter - can do anything! Review source before executing!
FILES
/etc/stonevpn.conf- Configuration file. See stonevpn(5) for further details.
EXAMPLES
- Create a certificate and (Unix) configuration file for John Cleese and pack everything into johncleese.zip:
-
stonevpn -f johncleese -n "John Cleese" -z
- The same, but now encrypt the user's private key with a password and email the zipfile to them:
-
stonevpn -f johncleese -n "John Cleese" -z -p -m user@domain.tld
BUGS
Please report bugs on http://github.com/lkeijser/stonevpn/issues or mail the author.AUTHOR
Léon Keijser <keijser at stone-it dot com>SEE ALSO
stonevpn(5)Contenus ©2006-2024 Benjamin Poulain
Design ©2006-2024 Maxime Vantorre