{"@attributes":{"version":"2.0"},"channel":{"title":"\u5b64\u5c9b","link":"https:\/\/gao4.top\/","description":"Recent content on \u5b64\u5c9b","image":{"title":"\u5b64\u5c9b","url":"https:\/\/gao4.top\/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E","link":"https:\/\/gao4.top\/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E"},"generator":"Hugo -- 0.148.0","language":"zh","lastBuildDate":"Mon, 20 Oct 2025 20:11:44 +0800","item":[{"title":"Keyguard App\u53d6\u6d88\u9501\u5b9a","link":"https:\/\/gao4.top\/20251020.html\/","pubDate":"Mon, 20 Oct 2025 20:11:44 +0800","guid":"https:\/\/gao4.top\/20251020.html\/","description":"

\"image-20251020201321178\"<\/p>"},{"title":"Openwrt\u4e0bocserv\u8bc1\u4e66\u767b\u5f55\u914d\u7f6eletsencrypt","link":"https:\/\/gao4.top\/20250814.html\/","pubDate":"Thu, 14 Aug 2025 12:48:39 +0800","guid":"https:\/\/gao4.top\/20250814.html\/","description":"

\u5e8f\u8a00<\/h2>\n

Openwrt\u5b89\u88c5OpenConnect VPN\u914d\u7f6e\u8bc1\u4e66\u767b\u5f55\u4e0e\u901a\u8fc7Lucky\u7533\u8bf7ssl\u8bc1\u4e66<\/p>\n

\u73af\u5883<\/h2>\n

openwrt \u7248\u672c<\/p>\n

\"openwrt\"<\/p>\n

Lucky\u7248\u672c<\/p>\n

\"lu\u73af\u5883\"<\/p>\n

ocserv\u7248\u672c<\/p>\n

\"image-20250814125516626\"<\/p>\n

win\u5ba2\u6237\u7aef\u7248\u672c<\/p>\n

\"image-20250814125544582\"<\/p>\n

\u914d\u7f6e<\/h2>\n

\u5b89\u88c5\u901a\u8fc7ssh\u4e0aopenwrt\u547d\u4ee4\u884c\u5b89\u88c5ocserv<\/h3>\n
\n
\n
1\n<\/span>2\n<\/span><\/code><\/pre><\/td>\n
\n
opkg update\n<\/span><\/span>opkg install ocserv luci-app-ocserv\n<\/span><\/span><\/code><\/pre><\/td><\/tr><\/table>\n<\/div>\n<\/div>
\u901a\u8fc7\u7533\u8bf7\u7684ssl\u8bc1\u4e66\u53bb\u6389\u4e0b\u9762\u5371\u9669\u63d0\u9192<\/h3>\n
\"\u5371\u9669\u63d0\u9192\"<\/p>\n
1\u3001\u53bbLucky\u7533\u8bf7ssl\u8bc1\u4e66\u540e\u5728\u8bc1\u4e66\u914d\u7f6e\u6700\u4e0b\u9762\u6709\u4e00\u4e2a\u8bc1\u4e66\u6620\u5c04<\/p>\n
\"\u8bc1\u4e66\u6620\u5c04\"<\/p>\n
2\u3001\u7136\u540e\u5728Openwrt \u4e0aOpenConnect VPN\u91cc\u6709\u4e00\u4e2a\u7f16\u8f91\u6a21\u7248<\/strong>\u4fee\u6539\u91cc\u9762\u4e0b\u5217\u914d\u7f6e\u5e76\u4fdd\u5b58<\/strong>\u4e3aLucky\u7533\u8bf7\u7684\u57df\u540d\u6620\u5c04\u91cc\u7684\u8bc1\u4e66\u8def\u5f84<\/p>\n
\n
\n
1\n<\/span>2\n<\/span><\/code><\/pre><\/td>\n
\n
server-cert = \/etc\/ocserv\/ssl\/gao4\u8303\u57df\u540d.pem\n<\/span><\/span>server-key = \/etc\/ocserv\/ssl\/gao4\u8303\u57df\u540d.key\n<\/span><\/span><\/code><\/pre><\/td><\/tr><\/table>\n<\/div>\n<\/div>
\"image-20250814130459122\"<\/p>\n
\u8fd9\u6837\u5c31\u53bb\u6389\u4e86\u8fde\u63a5\u65f6\u5019\u8bc1\u4e66\u65e0\u6548\u63d0\u9192<\/p>\n
3\u3001\u8fdb\u884c\u6d4b\u8bd5\uff0c\u5f00\u542f\u5ba2\u6237\u7aef\u4e0b\u9762\u56fe\u7247\u9009\u9879\u8fdb\u884c\u94fe\u63a5<\/p>\n
\"image-20250814130754110\"<\/p>\n
4\u3001\u8fde\u63a5\u6210\u529f\uff0c\u5e76\u6ca1\u6709\u63d0\u793a\u8bc1\u4e66\u65e0\u6548<\/p>\n
\"\u8fde\u63a5\u6210\u529f\"<\/p>\n
\u8bc1\u4e66\u8ba4\u8bc1\u767b\u5f55<\/h3>\n
\u7528\u6237\u8bc1\u4e66\u53ea\u9700 ocserv \u4fe1\u4efb CA \u5373\u53ef\uff0c\u56e0\u6b64\u4f7f\u7528\u81ea\u5efa CA \u7b7e\u53d1\u8bc1\u4e66\u3002<\/p>\n
1\u3001\u521b\u5efa\u8bc1\u4e66\u76ee\u5f55\u5e76\u79fb\u52a8\u5230\u8be5\u76ee\u5f55\u7136\u540e\u901a\u8fc7vi\u7f16\u8f91\uff08\u4e0d\u4f1avi\u7f16\u8f91\u5efa\u8bae\u901a\u8fc7\u641c\u7d22\u5f15\u64ce\u5b66\u4e60\u4e00\u4e0b\uff09<\/p>\n
\n
\n
1\n<\/span>2\n<\/span>3\n<\/span><\/code><\/pre><\/td>\n
\n
mkdir \/etc\/ocserv\/certs\/\n<\/span><\/span>cd \/etc\/ocserv\/certs\/\n<\/span><\/span>vi ocm\n<\/span><\/span><\/code><\/pre><\/td><\/tr><\/table>\n<\/div>\n<\/div>
2\u3001\u7c98\u8d34\u590d\u5236\u4e0b\u9762\u811a\u672c<\/p>\n
\n
\n
 1\n<\/span> 2\n<\/span> 3\n<\/span> 4\n<\/span> 5\n<\/span> 6\n<\/span> 7\n<\/span> 8\n<\/span> 9\n<\/span>10\n<\/span>11\n<\/span>12\n<\/span>13\n<\/span>14\n<\/span>15\n<\/span>16\n<\/span>17\n<\/span>18\n<\/span>19\n<\/span>20\n<\/span>21\n<\/span>22\n<\/span>23\n<\/span>24\n<\/span>25\n<\/span>26\n<\/span>27\n<\/span>28\n<\/span>29\n<\/span>30\n<\/span>31\n<\/span>32\n<\/span>33\n<\/span>34\n<\/span>35\n<\/span>36\n<\/span>37\n<\/span>38\n<\/span>39\n<\/span>40\n<\/span>41\n<\/span>42\n<\/span>43\n<\/span>44\n<\/span>45\n<\/span>46\n<\/span>47\n<\/span>48\n<\/span>49\n<\/span>50\n<\/span>51\n<\/span>52\n<\/span>53\n<\/span>54\n<\/span>55\n<\/span>56\n<\/span>57\n<\/span>58\n<\/span>59\n<\/span>60\n<\/span>61\n<\/span>62\n<\/span>63\n<\/span>64\n<\/span>65\n<\/span>66\n<\/span>67\n<\/span>68\n<\/span>69\n<\/span>70\n<\/span>71\n<\/span>72\n<\/span>73\n<\/span>74\n<\/span>75\n<\/span>76\n<\/span>77\n<\/span>78\n<\/span>79\n<\/span>80\n<\/span>81\n<\/span>82\n<\/span>83\n<\/span>84\n<\/span>85\n<\/span>86\n<\/span><\/code><\/pre><\/td>\n
\n
#!\/bin\/bash\n<\/span><\/span><\/span><\/span>\n<\/span><\/span>init()<\/span> {<\/span>\n<\/span><\/span>    WORK<\/span>=<\/span>".\/work"<\/span>\n<\/span><\/span>    CA_TMPL<\/span>=<\/span>"<\/span>${<\/span>WORK<\/span>}<\/span>\/ca.tmpl"<\/span>\n<\/span><\/span>    CA_KEY<\/span>=<\/span>"<\/span>${<\/span>WORK<\/span>}<\/span>\/ca-key.pem"<\/span>\n<\/span><\/span>    CA_CERT<\/span>=<\/span>".\/ca.pem"<\/span>\n<\/span><\/span>    USER<\/span>=<\/span>"<\/span>$1<\/span>"<\/span>\n<\/span><\/span>    USER_TMPL<\/span>=<\/span>"<\/span>${<\/span>WORK<\/span>}<\/span>\/<\/span>${<\/span>USER<\/span>}<\/span>.tmpl"<\/span>\n<\/span><\/span>    USER_KEY<\/span>=<\/span>"<\/span>${<\/span>WORK<\/span>}<\/span>\/<\/span>${<\/span>USER<\/span>}<\/span>-key.pem"<\/span>\n<\/span><\/span>    USER_CERT<\/span>=<\/span>"<\/span>${<\/span>WORK<\/span>}<\/span>\/<\/span>${<\/span>USER<\/span>}<\/span>.pem"<\/span>\n<\/span><\/span>    USER_P12<\/span>=<\/span>".\/<\/span>${<\/span>USER<\/span>}<\/span>.p12"<\/span>\n<\/span><\/span>    REVOKED_CERT<\/span>=<\/span>"<\/span>${<\/span>WORK<\/span>}<\/span>\/revoked.pem"<\/span>\n<\/span><\/span>    CRL_TMPL<\/span>=<\/span>"<\/span>${<\/span>WORK<\/span>}<\/span>\/crl.tmpl"<\/span>\n<\/span><\/span>    CRL_CERT<\/span>=<\/span>".\/crl.pem"<\/span>\n<\/span><\/span>\n<\/span><\/span>    # Ensure working directory<\/span>\n<\/span><\/span>    [[<\/span> -d $WORK<\/span> ]]<\/span> ||<\/span> mkdir -p $WORK<\/span>\n<\/span><\/span>\n<\/span><\/span>    # CA Template<\/span>\n<\/span><\/span>    [[<\/span> -f $CA_TMPL<\/span> ]]<\/span> ||<\/span> cat << _EOF_ > $CA_TMPL\n<\/span><\/span><\/span>cn = "VPN CA"\n<\/span><\/span><\/span>serial = 1\n<\/span><\/span><\/span>expiration_days = 3650\n<\/span><\/span><\/span>ca\n<\/span><\/span><\/span>signing_key\n<\/span><\/span><\/span>cert_signing_key\n<\/span><\/span><\/span>crl_signing_key\n<\/span><\/span><\/span>_EOF_<\/span>\n<\/span><\/span>\n<\/span><\/span>    # CA Private Key<\/span>\n<\/span><\/span>    [[<\/span> -f $CA_KEY<\/span> ]]<\/span> ||<\/span> certtool --generate-privkey --outfile $CA_KEY<\/span>\n<\/span><\/span>\n<\/span><\/span>    # CA Certificate<\/span>\n<\/span><\/span>    [[<\/span> -f $CA_CERT<\/span> ]]<\/span> ||<\/span> certtool --generate-self-signed --load-privkey $CA_KEY<\/span> --template $CA_TMPL<\/span> --outfile $CA_CERT<\/span>\n<\/span><\/span>}<\/span>\n<\/span><\/span>\n<\/span><\/span>generate()<\/span> {<\/span>\n<\/span><\/span>    # User Template<\/span>\n<\/span><\/span>    cat << _EOF_ > $USER_TMPL\n<\/span><\/span><\/span>cn = "$USER"\n<\/span><\/span><\/span>expiration_days = 3650\n<\/span><\/span><\/span>signing_key\n<\/span><\/span><\/span>tls_www_client\n<\/span><\/span><\/span>_EOF_<\/span>\n<\/span><\/span>\n<\/span><\/span>    # User Private Key<\/span>\n<\/span><\/span>    certtool --generate-privkey --outfile $USER_KEY<\/span>\n<\/span><\/span>\n<\/span><\/span>    # User Certificate<\/span>\n<\/span><\/span>    certtool --generate-certificate --load-privkey $USER_KEY<\/span> --load-ca-certificate $CA_CERT<\/span> --load-ca-privkey $CA_KEY<\/span> --template $USER_TMPL<\/span> --outfile $USER_CERT<\/span>\n<\/span><\/span>\n<\/span><\/span>    # Export User Certificate<\/span>\n<\/span><\/span>    certtool --to-p12 --pkcs-cipher 3des-pkcs12 --load-privkey $USER_KEY<\/span> --load-certificate $USER_CERT<\/span> --outfile $USER_P12<\/span> --outder\n<\/span><\/span>}<\/span>\n<\/span><\/span>\n<\/span><\/span>revoke()<\/span> {<\/span>\n<\/span><\/span>    # Copy User Certificate to Revoked Certificate<\/span>\n<\/span><\/span>    cat $USER_CERT<\/span> >> $REVOKED_CERT<\/span>\n<\/span><\/span>\n<\/span><\/span>    # CRL Template<\/span>\n<\/span><\/span>    [[<\/span> -f $CRL_TMPL<\/span> ]]<\/span> ||<\/span> cat << _EOF_ > $CRL_TMPL\n<\/span><\/span><\/span>crl_next_update = 3650\n<\/span><\/span><\/span>crl_number = 1\n<\/span><\/span><\/span>_EOF_<\/span>\n<\/span><\/span>\n<\/span><\/span>    # CRL Certificate<\/span>\n<\/span><\/span>    certtool --generate-crl --load-certificate $REVOKED_CERT<\/span> --load-ca-privkey $CA_KEY<\/span> --load-ca-certificate $CA_CERT<\/span> --template $CRL_TMPL<\/span> --outfile $CRL_CERT<\/span>\n<\/span><\/span>}<\/span>\n<\/span><\/span>\n<\/span><\/span>case<\/span> $1<\/span> in\n<\/span><\/span>    generate)<\/span>\n<\/span><\/span>        init $2<\/span>\n<\/span><\/span>        generate\n<\/span><\/span>        ;;<\/span>\n<\/span><\/span>    revoke)<\/span>\n<\/span><\/span>        init $2<\/span>\n<\/span><\/span>        revoke\n<\/span><\/span>        ;;<\/span>\n<\/span><\/span>    *)<\/span>\n<\/span><\/span>        echo<\/span> "\\\n<\/span><\/span><\/span>Usage:\n<\/span><\/span><\/span>    <\/span>$0<\/span> generate USER\n<\/span><\/span><\/span>    <\/span>$0<\/span> revoke USER\n<\/span><\/span><\/span>"<\/span>\n<\/span><\/span>esac<\/span>\n<\/span><\/span><\/code><\/pre><\/td><\/tr><\/table>\n<\/div>\n<\/div>
3\u3001\u7ed9\u4e8e\u811a\u672c\u6743\u9650<\/p>"},{"title":"\u5f53\u524d\u4f7f\u7528\u7684nas\u65b9\u6848\u5c0f\u8bb0\u5f55","link":"https:\/\/gao4.top\/202508071.html\/","pubDate":"Thu, 07 Aug 2025 08:50:17 +0800","guid":"https:\/\/gao4.top\/202508071.html\/","description":"
\u5f53\u524d\u786c\u4ef6<\/h2>\n