SSTP (softether) 설치

SSTP (softether) 설치

Linux (softether vpn server)

./vpncmd

VPN Server>ServerCertRegenerate ServerCertRegenerate command - Generate New Self-Signed Certificate with Specified CN (Common Name) and Register on VPN Server Value of Common Name (CN): [vpn 서버의 도메인 or IP주소 입력] A new server certificate has been set. If you are using OpenVPN protocols, please mind that you may have to update the inline certificate data in the OpenVPN configuration file. The command completed successfully. VPN Server>ServerCertGet ServerCertGet command - Get SSL Certificate of VPN Server Save X.509 certificate to file name: cert The command completed successfully.

* 위에서 CN 을 무조건 vpn 서버의 FQDN 입력해야 한다고 하는데 테스팅 해봐야 할듯 함

[root@localhost ~]# cat /usr/local/vpnserver/cert  -----BEGIN CERTIFICATE----- MIIDsjCCApqgAwIBAgIBADANBgkqhkiG9w0BAQsFADBYMRcwFQYDVQQDDA4xMTUu NjguMjQ0LjEwMTEXMBUGA1UECgwOMTE1LjY4LjI0NC4xMDExFzAVBgNVBAsMDjEx NS42OC4yNDQuMTAxMQswCQYDVQQGEwJVUzAeFw0xODA0MDUwNTQ1MTRaFw0zNzEy MzEwNTQ1MTRaMFgxFzAVBgNVBAMMDjExNS42OC4yNDQuMTAxMRcwFQYDVQQKDA4x MTUuNjguMjQ0LjEwMTEXMBUGA1UECwwOMTE1LjY4LjI0NC4xMDExCzAJBgNVBAYT AlVTMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e629xmSR2LURzYW 41IrQ9ILFAVItyH3FZPijxIlKyW/cFP6Rr6gMUDq1CepQSk3YozQn3ggcBeyAC2N +8oyAI2EycndP2SVaBziSOOSlAoTyNitdQcOe5+qzXsGuJyqEds155bUXggpLW9+ niYONEvdg+Eq5iqw+rlvm20Egsxlf4/QYqup9P5MJfzCpSpPi+YCnp30b5GHB0w6 FDR93nz45gHnu+pz12xiE/UeccFQRndMl8B66VhKUQH5YV4f5i6pWRFIV7F12ZdW Q4Pbow2BpopRJbHAlt3Juc3XtNu7EgT66sFTNmi80w9qmKM0VkztJdDi8UeD0kr7 mn1kIQIDAQABo4GGMIGDMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgH2MGMG A1UdJQRcMFoGCCsGAQUFBwMBBggrBgEFBQcDAgYIKwYBBQUHAwMGCCsGAQUFBwME BggrBgEFBQcDBQYIKwYBBQUHAwYGCCsGAQUFBwMHBggrBgEFBQcDCAYIKwYBBQUH AwkwDQYJKoZIhvcNAQELBQADggEBABHBZUO+jpLz6LNhf7ww+E2SLBj0dhO+h/q1 7b11nPKMeGNDT/zMZUCfIzcWOiQqnpWbwBVs7dcbEqruEP2IskxNoyMNutEvWgJz zgfEV9IBXmsaaJYX629pUJuDvt7FWsWYf7xrXVipaSwUSgWMcS0rCp8GIna3tEbH V1+9ZJ76CCOuvXWR0JwgUANahkKgZRoeiUUNPARuizx/tjtCPrBLHCQyVS040y3b r2k/+dXpC2T7slxdYkurB8sD2/wCgqSmpCnyZF5LAYyMmOOW6MXNxlT83cb2eKzV vT1aoEc5Abyi+FbTGVU+eML+3o+4vao94sm3OxzR7VBTAULQFsM= -----END CERTIFICATE-----

* 해당 내용으로 해서 윈도우 클라이언트에 텍스트 파일 하나 생성

SSTP 오류

0x800B0109 : 인증서 체인은 처리되었지만 https://pchelp.ricmedia.com/install-x509-certificate-sstp-vpn-windows/#Error0x800B0109

windows (client)

1. 윈도우 실행창 - mmc 입력 2. 파일 - 스냅인 추가/제거 3. 인증서 선택 - 추가 버튼 클릭후 확인 4. 컴퓨터 계정 선택 (다음) - 로컬컴퓨터 : (이 콘솔이 ~ 컴퓨터) 선택 (마침) 5. 확인 6. 인증서 (로컬 컴퓨터) --> 신뢰할 수 있는 루트 인증 기간 - 인증서 - 인증서 가져오기 - 인증서 텍스트 파일 선택 7. 다음 - 다음 - 마침 - CN 이름으로 인증서 생성됨