Difference between revisions of "Network/VPN"

From Nottinghack Wiki
Jump to navigation Jump to search
m (moved VPN to Network/VPN)
Line 1: Line 1:
Members only openVPN connections to the space, which allows access to the intranet from the out side world
+
{{TOC right}}
 +
===OpenVPN===
 +
The openVPN server running on [[Network#Kryten|Kyrten]] provides a secure link into the hackspace network.<br/>
 +
In order to access the VPN members will require a copy of the NottingHack CA .crt and there own 1024bit rsa key/crt signed by the NottingHack CA<br/>
 +
They will also need a copy of our client.conf.<br/>
  
[[Network#Kryten|Kyrten]] runs our openVPN server
+
Members can generate there own key's and a certificate signing request using easy-rsa (included with openVPN install)
 +
To generate a certificate signing request you will require our CA.crt which can be found on http://holly/CA.crt note this is only accessible form the backspace network<br/>
 +
Bellow are details needed to verify the CA.crt
  
Time sysc is done with ntp://0.uk.pool.ntp.org
+
Time sync on Kryten is done with ntp://0.uk.pool.ntp.org and clients wishing to connected should also use the uk pool<br/>
  
 +
Will add details on generating rsa key and CSR at a later date--[[User:Lwk|&#39;RepRap&#39; Matt]] 09:44, 26 February 2012 (EST)
  
 +
====client.conf====
 +
Will add this later --[[User:Lwk|&#39;RepRap&#39; Matt]] 09:44, 26 February 2012 (EST)
  
===ChaosVPN===
+
====NottinHack CA====
 +
Organizastion: NottingHack<br/>
 +
Common Name: NottingHack CA<br/>
 +
Serial Number: 00 F9 FF 7F 51 CE 9C 4F 71<br/>
 +
 
 +
Fingerprints<br/>
 +
SHA-1:  AC AC F2 21 DE 6F CF 2A 8F 22 4A 15 07 B0 EB F3 08 C0 7A 05<br/>
 +
MD5:  B5 80 78 D9 FA 60 42 86 43 E9 70 16 59 10 BC BA
 +
 
 +
==ChaosVPN==
 
Chaosvpn is a fully meshed VPN to connect the hackerspaces and other spaces where hackers are around. Nottinghack may in the future enable a link to this network.
 
Chaosvpn is a fully meshed VPN to connect the hackerspaces and other spaces where hackers are around. Nottinghack may in the future enable a link to this network.
  

Revision as of 14:44, 26 February 2012

OpenVPN

The openVPN server running on Kyrten provides a secure link into the hackspace network.
In order to access the VPN members will require a copy of the NottingHack CA .crt and there own 1024bit rsa key/crt signed by the NottingHack CA
They will also need a copy of our client.conf.

Members can generate there own key's and a certificate signing request using easy-rsa (included with openVPN install) To generate a certificate signing request you will require our CA.crt which can be found on http://holly/CA.crt note this is only accessible form the backspace network
Bellow are details needed to verify the CA.crt

Time sync on Kryten is done with ntp://0.uk.pool.ntp.org and clients wishing to connected should also use the uk pool

Will add details on generating rsa key and CSR at a later date--'RepRap' Matt 09:44, 26 February 2012 (EST)

client.conf

Will add this later --'RepRap' Matt 09:44, 26 February 2012 (EST)

NottinHack CA

Organizastion: NottingHack
Common Name: NottingHack CA
Serial Number: 00 F9 FF 7F 51 CE 9C 4F 71

Fingerprints
SHA-1: AC AC F2 21 DE 6F CF 2A 8F 22 4A 15 07 B0 EB F3 08 C0 7A 05
MD5: B5 80 78 D9 FA 60 42 86 43 E9 70 16 59 10 BC BA

ChaosVPN

Chaosvpn is a fully meshed VPN to connect the hackerspaces and other spaces where hackers are around. Nottinghack may in the future enable a link to this network.

ChaosVPN reserved network range: 172.31.32.0/23 [1]