' . $er . '
Creating 1024 bit Diffie-Hellman parameters used by OpenVPN.
';
- #print "Saving to $config[private_dir]/dhparam1024.pem.
";
- #$cmd = "openssl dhparam -rand '$config[random]' -out '$config[private_dir]/dhparam1024.pem' 1024";
- #print $cmd.'
';
- #flush();
- #flush_exec($cmd,100);
-
- #print "Please ignore warnings about \"unable to write 'random state\'
";
-
- // This method works but still errors in logs
- // exec(DH . "-rand '$config[random]' -out '$config[private_dir]/dhparam1024.pem' 1024");
- // exec(DH . " -out '$config[private_dir]/dhparam1024.pem' 1024");
-
- print '
Creating 2048 bit Diffie-Hellman parameters used by OpenVPN.
';
- print "Saving to $store_dir/dhparam2048.pem.
";
- $cmd = "openssl dhparam -rand '$config[random]' -out '$config[private_dir]/dhparam2048.pem' 2048";
- print $cmd.'
';
- flush();
- flush_exec($cmd,200);
-
- print "Please ignore warnings about \"unable to write 'random state'
";
-
- #
- # Create a TLS auth key for OpenVPN if openvpn is installed
- #
- $command = 'which openvpn';
- $command = escapeshellcmd($command);
-
- if (system ($command) == '/usr/sbin/openvpn') {
-
- print '
Creating a TLS authentication key used by OpenVPN.
';
- print "Saving to $store_dir/takey.pem.
";
- $cmd = "openvpn --genkey --secret '$config[private_dir]/takey.pem'";
- print $cmd.'
';
+ #
+ # Create a new self-signed CA certificate in PEM format.
+ #
+ print 'Creating root certificate...
';
flush();
- flush_exec($cmd);
- } else {
- echo "openvpn is required to generate a takey.pem
";
- echo "You can create one later like this:
";
- echo "openvpn --genkey --secret". $config['private_dir'] . "/takey.pem
";
- }
+
+ $configOpenssl_cnf = $config['openssl_cnf'];
+ $configPrivate_dir = $config['private_dir'];
+ $configCacert_pem = $config['cacert_pem'];
+ $configCa_pwd = $config['ca_pwd'];
+ $configCakey = $config['cakey'];
+ $configRandom = $config['random'];
+ $configCacrl_der = $config['cacrl_der'];
+ $configCacrl_pem = $config['cacrl_pem'];
+
+ // .rnd created here
+ exec(REQ . " -x509 -config $tmp_cnf -extensions root_ext -newkey rsa:$keysize -keyout $configCakey -out $configCacert_pem -passout pass:'$configCa_pwd' -days $days 2>&1");
+
+ # **** DISABLED *****
+ # It appears that both IE and Netscape accept PEM formatted root certificates
+ #
+ # Create a copy of the CA certificate in DER format.
+ #
+ #exec(X509 . " -in ca/$config[cacert_pem] -inform PEM -out ca/$config[cacert_der] -outform DER 2>&1");
+
+ #
+ # Generate the initial CRL.
+ #
+ print 'Generating certificate revocation list...
';
+ flush();
+ exec(CA . " -gencrl -config $configOpenssl_cnf -out $configCacrl_pem -passin pass:'$configCa_pwd'");
+
+ # Make a copy of the CRL in DER format.
+ #
+ exec(CRL . " -in $configCacrl_pem -out $configCarcrl_der -inform PEM -outform DER");
+
+ #
+ # Clean up.
+ #
+ if (! unlink("$store_dir/tmp/openssl.cnf")) {
+ print "Can't unlink $store_dir/tmp/openssl.cnf";
+ }
+
+ #
+ # Create dhparam files for OpenVPN and others.
+ #
+ #print '
Creating 1024 bit Diffie-Hellman parameters used by OpenVPN.
';
+ #print "Saving to $config[private_dir]/dhparam1024.pem.
";
+ #$cmd = "openssl dhparam -rand '$config[random]' -out '$config[private_dir]/dhparam1024.pem' 1024";
+ #print $cmd.'
';
+ #flush();
+ #flush_exec($cmd,100);
+
+ #print "Please ignore warnings about \"unable to write 'random state\'
";
+
+ // This method works but still errors in logs
+ // exec(DH . "-rand '$config[random]' -out '$config[private_dir]/dhparam1024.pem' 1024");
+ // exec(DH . " -out '$config[private_dir]/dhparam1024.pem' 1024");
+
+ print '
Creating 2048 bit Diffie-Hellman parameters used by OpenVPN.
';
+ print "Saving to $store_dir/dhparam2048.pem.
";
+ $cmd = "openssl dhparam -rand '$configRandom' -out '$configPrivate_dir/dhparam2048.pem' 2048";
+ print $cmd.'
';
+ flush();
+ flush_exec($cmd, 200);
+
+ print "Please ignore warnings about \"unable to write 'random state'
";
+
+ #
+ # Create a TLS auth key for OpenVPN if openvpn is installed
+ #
+ $command = 'which openvpn';
+ $command = escapeshellcmd($command);
+
+ if (system($command) == '/usr/sbin/openvpn') {
+ print '
Creating a TLS authentication key used by OpenVPN.
';
+ print "Saving to $store_dir/takey.pem.
";
+ $cmd = "openvpn --genkey --secret '$configPrivate_dir/takey.pem'";
+ print $cmd.'
';
+ flush();
+ flush_exec($cmd);
+ } else {
+ echo "openvpn is required to generate a takey.pem
";
+ echo "You can create one later like this:
";
+ echo "openvpn --genkey --secret". $configPrivate_dir . "/takey.pem
";
+ }
-
- #
- # Step aside and let the users in (create index.php files).
- #
- if (! unlink('index.php')) print "Can't unlink index.php";
- if (! unlink('setup.php')) print "Can't unlink setup.php";;
- if (! unlink('ca/index.php')) print "Can't unlink ca/index.php";
- if (! symlink('main.php','index.php')) print "Can't symlink main.php";
- if (! symlink('main.php','ca/index.php')) print "Can't symlink ca/main.php";
+
+ #
+ # Step aside and let the users in (create index.php files).
+ #
+ if (! unlink('index.php')) {
+ print "Can't unlink index.php";
+ }
+ if (! unlink('setup.php')) {
+ print "Can't unlink setup.php";
+ };
+ if (! unlink('ca/index.php')) {
+ print "Can't unlink ca/index.php";
+ }
+ if (! symlink('main.php', 'index.php')) {
+ print "Can't symlink main.php";
+ }
+ if (! symlink('main.php', 'ca/index.php')) {
+ print "Can't symlink ca/main.php";
+ }
- ?>
-
-
+