Zen

Translation

The Falcot Corp administrators use this tool to create the required certificates, both for the server and the clients. This allows the configuration of all clients to be similar since they will only have to be set up so as to trust certificates coming from Falcot's local CA. This CA is the first certificate to create; to this end, the administrators set up a directory with the files required for the CA in an appropriate location, preferably on a machine not connected to the network in order to mitigate the risk of the CA's private key being stolen.
434/5540 · 554

Sign in to save the translation.

English Arabic (Morocco) Actions
<emphasis>ALTERNATIVE</emphasis> GnuTLS
<emphasis>ثقافة</emphasis> SSL وTLS
<primary>DTLS</primary>
<primary>TLS</primary>
<primary>GnuTLS</primary>
<primary>TLS</primary>
GnuTLS can also be used to generate a CA, and deal with other technologies around the TLS, DTLS and SSL protocols.
 
The package <emphasis role="pkg">gnutls-bin</emphasis> contains the command-line utilities. It is also useful to install the <emphasis role="pkg">gnutls-doc</emphasis> package, which includes extensive documentation.
 
The Falcot Corp administrators use this tool to create the required certificates, both for the server and the clients. This allows the configuration of all clients to be similar since they will only have to be set up so as to trust certificates coming from Falcot's local CA. This CA is the first certificate to create; to this end, the administrators set up a directory with the files required for the CA in an appropriate location, preferably on a machine not connected to the network in order to mitigate the risk of the CA's private key being stolen.
قرر مديرو النظم في شركة فلكوت استخدام هذه الأداة لإنشاء الشهادات المطلوبة لكل من المخدم والعملاء. هذا يجعل إعدادات العملاء متشابهة لأنها تحتاج فقط لضبطها بحيث تثق بالشهادات الصادرة عن سلطة التصديق المحلية في فلكوت. أول شهادة يجب إنشاؤها هي سلطة التصديق هذه؛ لذلك سوف يجهز مديرو النظام مجلداً يحوي الملفات المطلوبة لسلطة التصديق في مكان مناسب، ويفضل أن يكون على جهاز غير متصل بالشبكة للحد من خطر سرقة المفتاح الخاص بسلطة التصديق (CA).

<computeroutput>$ </computeroutput><userinput>make-cadir pki-falcot
</userinput><computeroutput>$ </computeroutput><userinput>cd pki-falcot</userinput>

<computeroutput>$ </computeroutput><userinput>make-cadir pki-falcot
</userinput><computeroutput>$ </computeroutput><userinput>cd pki-falcot</userinput>
They then store the required parameters into the <filename>vars</filename> file, which can be uncommented and edited:
بعدها سوف يحفظون المتغيرات المطلوبة في ملف <filename>vars</filename>، خصوصًا تلك التي يبدأ اسمها بـ<literal dir="ltr">KEY_</literal>؛ ثم تدمج هذه المتغيرات في البيئة:

<computeroutput>$ </computeroutput><userinput>grep EASYRSA vars
</userinput><computeroutput><![CDATA[if [ -z "$EASYRSA_CALLER" ]; then
# easyrsa. More specific variables for specific files (e.g., EASYRSA_SSL_CONF)
#set_var EASYRSA "${0%/*}"
#set_var EASYRSA_OPENSSL "openssl"
#set_var EASYRSA_OPENSSL "C:/Program Files/OpenSSL-Win32/bin/openssl.exe"
#set_var EASYRSA_PKI "$PWD/pki"
#set_var EASYRSA_TEMP_DIR "$EASYRSA_PKI"
#set_var EASYRSA_DN "cn_only"
set_var EASYRSA_REQ_COUNTRY "FR"
set_var EASYRSA_REQ_PROVINCE "Loire"
set_var EASYRSA_REQ_CITY "Saint-Étienne"
set_var EASYRSA_REQ_ORG "Falcot Corp"
set_var EASYRSA_REQ_EMAIL "admin@falcot.com"
set_var EASYRSA_REQ_OU "Certificate authority"
#set_var EASYRSA_KEY_SIZE 2048
#set_var EASYRSA_ALGO rsa
#set_var EASYRSA_CURVE secp384r1
#set_var EASYRSA_CA_EXPIRE 3650
#set_var EASYRSA_CERT_EXPIRE 825
#set_var EASYRSA_CRL_DAYS 180
#set_var EASYRSA_CERT_RENEW 30
#set_var EASYRSA_RAND_SN "yes"
#set_var EASYRSA_NS_SUPPORT "no"
#set_var EASYRSA_NS_COMMENT "Easy-RSA Generated Certificate"
#set_var EASYRSA_TEMP_FILE "$EASYRSA_PKI/extensions.temp"
# when undefined here, default behaviour is to look in $EASYRSA_PKI first, then
# fallback to $EASYRSA for the 'x509-types' dir. You may override this
#set_var EASYRSA_EXT_DIR "$EASYRSA/x509-types"
#set_var EASYRSA_KDC_REALM "CHANGEME.EXAMPLE.COM"
# EASYRSA_PKI or EASYRSA dir (in that order.) NOTE that this file is Easy-RSA
#set_var EASYRSA_SSL_CONF "$EASYRSA/openssl-easyrsa.cnf"
#set_var EASYRSA_REQ_CN "ChangeMe"
#set_var EASYRSA_DIGEST "sha256"
#set_var EASYRSA_BATCH ""
]]>$ </computeroutput><userinput>vim vars
</userinput><computeroutput>$ </computeroutput>
 
Now we prepare the public key infrastructure directory with the following command:
 

<computeroutput>$ </computeroutput><userinput>./easyrsa init-pki
</userinput><computeroutput>

init-pki complete; you may now create a CA or requests.
Your newly created PKI dir is: /home/debian/pki-falcot/pki

</computeroutput>

<computeroutput>$ </computeroutput><userinput>make-cadir pki-falcot
</userinput><computeroutput>$ </computeroutput><userinput>cd pki-falcot</userinput>

Loading…

No matching activity found.
Browse all string changes

Things to check

Trailing space

Source and translation do not both end with a space

Fix string

Reset

Mismatched full stop

Source and translation do not both end with a full stop

Reset

Glossary

English Arabic (Morocco)
No related strings found in the glossary.

String information

Flags
xml-text
String age
8 years ago
Last updated
11 months ago
Source string age
8 years ago
Translation file
ar-MA/10_network-infrastructure.po, string 121