From e3bfcb536745bf017aa805dce1c217de468425a9 Mon Sep 17 00:00:00 2001 From: 2q1w2007 <2q1w2007@163.com> Date: Thu, 31 Jul 2014 16:24:45 +0800 Subject: [PATCH] =?UTF-8?q?=E3=80=82=E3=80=82=E3=80=82?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- ...OpenVPN up and running, enjoy your privacy.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/sources/tech/20140701 Get OpenVPN up and running, enjoy your privacy.md b/sources/tech/20140701 Get OpenVPN up and running, enjoy your privacy.md index d5fa50934e..4ebef651a9 100644 --- a/sources/tech/20140701 Get OpenVPN up and running, enjoy your privacy.md +++ b/sources/tech/20140701 Get OpenVPN up and running, enjoy your privacy.md @@ -31,7 +31,7 @@ ### 第二步 -- 生成证书和私钥 ### -这是安装OpenVPNZ中最重要和最关键的一步,目的是建立公钥基础设施(PKI)。包括如下内容: +这是安装OpenVPN中最重要和最关键的一步,目的是建立公钥基础设施(PKI)。包括如下内容: - 为OpenVPN服务器创建一个证书(公钥)和一个私钥 - 为每个OpenVPN客户端创建证书和私钥 @@ -63,7 +63,7 @@ 你可以根据自己的情况设置不同的值。特别注意最后KEY_ALTNAMES这一行,尽管这不是原本vars文件中有的但是我们还是把它加到文件的尾部,不然建立CA的脚本会运行失败。 -保存更改,我们得按[CTRL+O]然后按[Enter]。想退出nano，请按[CTRL+X]。Now, we gain access to the root account and move on to building of the master certificate and private key: +保存更改,我们得按[CTRL+O]然后按[Enter]。想退出nano，请按[CTRL+X]。现在,我们要获得root访问权限,继续生成主证书和私钥: sub0@delta:~$ sudo su root@delta:/home/sub0# cd /etc/openvpn/easy-rsa @@ -93,11 +93,11 @@ Email Address [nobody@parabing.com]: root@delta:/etc/openvpn/easy-rsa# -In our example the default answers were used for all the questions. After the build-ca script finishes we have the file for the master certificate (keys/ca.crt) and also the file for the private key (keys/ca.key). The latter must be kept secret at all costs. +在我们的实例中,所有问题的答案都选择了默认的。在运行了build-ca脚本后,我们就获得了主证书文件(keys/ca.crt)和对应的私钥(keys/ca.key)。私钥必须不计代价的保密。 -### Step 03 -- Certificate and private key for the OpenVPN server ### +### 第三步 -- 生成OpenVPN服务器的证书和私钥 ### -Before we make a certificate and private key for our OpenVPN server, we need to pick a name for it. We decided to name ours “delta” and then ran the build-key-server script to get the keys: +在我们为OpenVPN服务器生成证书和密钥之前,我们得给他起个名。我决定把它叫"delta",然后运行build-key-server脚本来获取证书和密钥: root@delta:/etc/openvpn/easy-rsa# sh build-key-server delta Generating a 1024 bit RSA private key @@ -145,11 +145,11 @@ Before we make a certificate and private key for our OpenVPN server, we need to Data Base Updated root@delta:/etc/openvpn/easy-rsa# -The script successfully finished and we got a certificate (keys/delta.crt) as well as a private key (keys/delta.key) for our server. Note that the server certificate is signed by the CA’s private key. +当脚本成功运行完的时候,我们就得到了服务器的证书(keys/delta.crt)和私钥(keys/delta.key)。注意服务器证书被CA的私钥签名了。 -### Step 04 -- Diffie-Hellman parameters ### +### 第四步 -- 创建Diffie-Hellman参数 ### -The secure passing of keys over an insecure communications channel is made possible thanks to a well-known technique involving the so called Diffie-Hellman parameters. To generate those we just type +幸亏有了Diffie-Hellman参数,我们才能在不安全的通信通道里安全的交换密钥。为了创建它我们需要键入: root@delta:/etc/openvpn/easy-rsa# sh build-dh Generating DH parameters, 2048 bit long safe prime, generator 2