diff --git a/ca/create_all_keys.sh b/ca/create_all_keys.sh index 4350306..01c9b40 100755 --- a/ca/create_all_keys.sh +++ b/ca/create_all_keys.sh @@ -4,13 +4,12 @@ cert_ca="/C=PT/ST=Coimbra/L=Coimbra/O=UC/CN=CoimbraVPN" cert_vpn="/C=PT/ST=Coimbra/L=Coimbra/O=UC/CN=gateway" cert_user="/C=PT/ST=Coimbra/L=Coimbra/O=UC/CN=warrior" -echo 1000 > serial - +[[ -e "serial" ]] || echo 1000 > serial [[ -e "ca.key" ]] || openssl genrsa -out "ca.key" 2048 [[ -e "ca.crt" ]] || openssl req -x509 -nodes -days 365 -key "ca.key" -out "ca.crt" -subj "$cert_ca" [[ -e "vpn.key" ]] || openssl genrsa -out "vpn.key" 2048 [[ -e "vpn.csr" ]] || openssl req -new -key "vpn.key" -out "vpn.csr" -subj "$cert_vpn" -[[ -e "vpn.crt" ]] || openssl ca -batch -in "vpn.csr" -cert "ca.crt" -keyfile "ca.key" -out "vpn.crt" -config cheese.cfg +[[ -e "vpn.crt" ]] || openssl ca -batch -in "vpn.csr" -cert "ca.crt" -keyfile "ca.key" -out "vpn.crt" -config cheese.cfg [[ -e "dh2048.pem" ]] || openssl dhparam -out "dh2048.pem" 2048 [[ -e "ta.key" ]] || openvpn --genkey secret "ta.key" [[ -e "user.key" ]] || openssl genrsa -out user.key diff --git a/conf/ocsp-verify.sh b/conf/ocsp-verify.sh index 1ae2f1e..cd545b2 100755 --- a/conf/ocsp-verify.sh +++ b/conf/ocsp-verify.sh @@ -27,4 +27,6 @@ if [ "$depth" -eq 0 ]; then fi fi +echo "ERROR: depth > 0" >> /etc/openvpn/server/ocsp.log + exit 0