actube/ssl
7u83@mail.ru 6e77f4ab4f Initial commit
FossilOrigin-Name: acc3f20b84914eb798f05017132c09cf41d9beb610630752abd45f680bae984c
2015-01-03 19:41:06 +00:00
..
README Spelling ... 2014-08-18 06:05:56 +00:00
mkcerts.sh Played around with different startdate and enddate. 2014-08-11 15:31:04 +00:00
mkciscoimport.sh Builds a script that can be pasted into a Cisco terminal to import the ca certificate. 2014-08-11 15:32:37 +00:00
mkclean.sh Initial commit 2015-01-03 19:41:06 +00:00
mkrootca.sh Increased lieftime so we can build certificates starting on jan 1970. 2014-08-11 15:31:52 +00:00
openssl.cnf Changed hash algorithm to md5 so an cisco IOS 12.3-image can import certificate. 2014-08-10 10:21:03 +00:00

README

Create ssl certificates to test AC-Tube and it's WTP
====================================================

1. Create a root CA by executing: 

   ./mkrootca

   This creates the files root-ca.crt and root-ca.key.


2. Create client certificates for AC and WTP

   ./mkcerts

   This will create the files ac.key, ac.crt and  wtp.crt, wtp.key. 
   All .key files are protected with  the password you have chosen 
   in the certificate creation process. 

3. Put these entries into  ac.conf  located in  the    ac directory, 
   so AC-Tube wilil use the certificates:

   ssl_key=../../ssl/ac.key
   ssl_key_pass=your password 
   ssl_cert=../../ssl/ac.crt

   For WTP the certiciate's config entries for now are hard-coded.
   Now you can play around joining WTP to AC...

4. If you want to connect a Cisco 1130 series LAP to  AC-Tube you 
   have to install the CA file on the LAP. Therofore you can create 
   a terminal script by  executing:

   ./mkciscoimport.sh 	

   Paste the result into a terminal session when in enabled mode. 

   To ac.conf add the following entry:
   
   dtls_verify_peer = no

   Now your Cisco 1130 LAP will join to AC-Tube. Remember that the 
   Cisco LAP will lose the installed  certificate after rebooting. 


If you experience with other Cisco LAPs (e.g. 1141), please tell me.
7u83@mail.ru.