diff --git a/TODO.md b/TODO.md new file mode 100644 index 0000000..af201b3 --- /dev/null +++ b/TODO.md @@ -0,0 +1,7 @@ +# Objectivos de acordo com o enunciado + +## Goals +- [X] Configure a tunnel in the "road warrior" +- [ ] Enable two factor authentication with OpenSSL and Apache services +- [ ] Manage PKI: certification authorities, X.509 certificates, revocation and OCSP. + diff --git a/conf/client.conf b/conf/client.conf index 87361c7..7eafab4 100644 --- a/conf/client.conf +++ b/conf/client.conf @@ -1,7 +1,7 @@ client dev tun proto udp -remote 10.60.0.3 1194 # ip da vpn gateway +remote 193.136.212.1 1194 # ip da vpn gateway persist-tun persist-key @@ -18,3 +18,5 @@ auth-user-pass tls-auth /etc/openvpn/client/ta.key 1 remote-cert-tls server +static-challenge "Enter TOTP: " 1 +reneg-sec 0 diff --git a/conf/vpn.conf b/conf/vpn.conf index d621874..e65080b 100644 --- a/conf/vpn.conf +++ b/conf/vpn.conf @@ -23,4 +23,3 @@ plugin /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so totp tls-auth /etc/openvpn/server/ta.key 0 static-challenge "Enter TOTP: " 1 -handshake-window 120