change client config to use tls-crypt instead of tls-auth

This commit is contained in:
lawtancool 2020-02-21 21:15:32 -08:00 committed by GitHub
parent 692d5cf54b
commit b6de5e4a40
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -58,17 +58,18 @@ $(openssl x509 -in $EASYRSA_PKI/issued/${cn}.crt)
<ca> <ca>
$(cat $EASYRSA_PKI/ca.crt) $(cat $EASYRSA_PKI/ca.crt)
</ca> </ca>
key-direction 1 #key-direction 1
<tls-auth> <tls-crypt>
$(cat $EASYRSA_PKI/ta.key) $(cat $EASYRSA_PKI/ta.key)
</tls-auth> </tls-crypt>
" "
elif [ "$mode" == "separated" ]; then elif [ "$mode" == "separated" ]; then
echo " echo "
key ${cn}.key key ${cn}.key
ca ca.crt ca ca.crt
cert ${cn}.crt cert ${cn}.crt
tls-auth ta.key 1 tls-crypt ta.key
#tls-auth ta.key 1
" "
fi fi