summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rwxr-xr-xusr/local/www/vpn_openvpn.php92
-rwxr-xr-xusr/local/www/vpn_openvpn_create_certs.php357
2 files changed, 403 insertions, 46 deletions
diff --git a/usr/local/www/vpn_openvpn.php b/usr/local/www/vpn_openvpn.php
index 6fd3e1e..6b507ed 100755
--- a/usr/local/www/vpn_openvpn.php
+++ b/usr/local/www/vpn_openvpn.php
@@ -1,21 +1,21 @@
#!/usr/local/bin/php
-<?php
+<?php
/*
vpn_openvpn.php
Copyright (C) 2004 Peter Curran (peter@closeconsultants.com).
All rights reserved.
-
+
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:
-
+
1. Redistributions of source code must retain the above copyright notice,
this list of conditions and the following disclaimer.
-
+
2. Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in the
documentation and/or other materials provided with the distribution.
-
+
THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
@@ -58,44 +58,44 @@ if ($_POST) {
do_input_validation($_POST, $reqdfields, $reqdfieldsn, &$input_errors);
}
-
+
/* need a test here to make sure prefix and max_clients are coherent */
-
+
/* Sort out the cert+key files */
if (is_null($_POST['ca_cert']))
$input_errors[] = "You must provide a CA certificate file";
elseif (!strstr($_POST['ca_cert'], "BEGIN CERTIFICATE") || !strstr($_POST['ca_cert'], "END CERTIFICATE"))
$input_errors[] = "The CA certificate does not appear to be valid.";
-
+
if (is_null($_POST['srv_cert']))
$input_errors[] = "You must provide a server certificate file";
elseif (!strstr($_POST['srv_cert'], "BEGIN CERTIFICATE") || !strstr($_POST['srv_cert'], "END CERTIFICATE"))
$input_errors[] = "The server certificate does not appear to be valid.";
-
+
if (is_null($_POST['srv_key']))
$input_errors[] = "You must provide a server key file";
elseif (!strstr($_POST['srv_key'], "BEGIN RSA PRIVATE KEY") || !strstr($_POST['srv_key'], "END RSA PRIVATE KEY"))
$input_errors[] = "The server key does not appear to be valid.";
-
+
if (is_null($_POST['dh_param']))
$input_errors[] = "You must provide a DH parameters file";
elseif (!strstr($_POST['dh_param'], "BEGIN DH PARAMETERS") || !strstr($_POST['dh_param'], "END DH PARAMETERS"))
$input_errors[] = "The DH parameters do not appear to be valid.";
-
+
if (!$input_errors) {
$server =& $config['ovpn']['server'];
$server['enable'] = $_POST['enable'] ? true : false;
-
+
/* Make sure that the tunnel interface type has not changed */
- if ($server['tun_iface'] != $_POST['tun_iface']){
+ if ($server['tun_iface'] != $_POST['tun_iface']){
$server['tun_iface'] = $_POST['tun_iface'];
touch($d_sysrebootreqd_path);
}
-
+
$server['bind_iface'] = $_POST['bind_iface'];
$server['port'] = $_POST['port'];
$server['proto'] = $_POST['proto'];
-
+
/* Make sure the IP address and/or prefix have not changed */
if ($server['ipblock'] != $_POST['ipblock']){
$server['ipblock'] = $_POST['ipblock'];
@@ -105,7 +105,7 @@ if ($_POST) {
$server['prefix'] = $_POST['prefix'];
touch($d_sysrebootreqd_path);
}
-
+
$server['maxcli'] = $_POST['maxcli'];
$server['crypto'] = $_POST['crypto'];
$server['cli2cli'] = $_POST['cli2cli'] ? true : false;
@@ -125,8 +125,8 @@ if ($_POST) {
$server['ca_cert'] = base64_encode($_POST['ca_cert']);
$server['srv_cert'] = base64_encode($_POST['srv_cert']);
$server['srv_key'] = base64_encode($_POST['srv_key']);
- $server['dh_param'] = base64_encode($_POST['dh_param']);
-
+ $server['dh_param'] = base64_encode($_POST['dh_param']);
+
write_config();
$retval = 0;
@@ -164,7 +164,7 @@ $pconfig = $config['ovpn']['server'];
<form action="vpn_openvpn.php" method="post" enctype="multipart/form-data" name="iform" id="iform">
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr><td>
- <ul id="tabnav">
+ <ul id="tabnav">
<li class="tabact">Server</li>
<li class="tabinact"><a href="vpn_openvpn_cli.php">Client</a></li>
</ul>
@@ -181,7 +181,7 @@ $pconfig = $config['ovpn']['server'];
<input name="enable" type="checkbox" value="yes" <?php if (isset($pconfig['enable'])) echo "checked"; ?>>
<strong>Enable OpenVPN server </strong></td>
</tr>
-
+
<tr>
<td width="22%" valign="top" class="vncellreq">Tunnel type</td>
<td width="78%" class="vtable">
@@ -191,7 +191,7 @@ $pconfig = $config['ovpn']['server'];
TAP
</td>
</tr>
-
+
<tr>
<td width="22%" valign="top" class="vncell">OpenVPN protocol/port</td>
<td width="78%" class="vtable">
@@ -199,16 +199,16 @@ $pconfig = $config['ovpn']['server'];
UDP&nbsp;
<input type="radio" name="proto" class="formfld" value="TCP" <?php if ($pconfig['proto'] == 'TCP') echo "checked"; ?>>
TCP<br><br>
- Port:
+ Port:
<input name="port" type="text" class="formfld" size="5" maxlength="5" value="<?= $pconfig['port']; ?>"><br>
Enter the port number to use for the server (default is 5000).</td>
</tr>
-
+
<tr>
<td width="22%" valign="top" class="vncellreq">Interface binding</td>
<td width="78%" class="vtable">
<select name="bind_iface" class="formfld">
- <?php
+ <?php
$interfaces = ovpn_real_interface_list();
foreach ($interfaces as $key => $iface):
?>
@@ -219,12 +219,12 @@ $pconfig = $config['ovpn']['server'];
<span class="vexpl"><br>
Choose an interface for the OpenVPN server to listen on.</span></td>
</tr>
-
- <tr>
+
+ <tr>
<td width="22%" valign="top" class="vncellreq">IP address block</td>
- <td width="78%" class="vtable">
+ <td width="78%" class="vtable">
<input name="ipblock" type="text" class="formfld" size="20" value="<?=htmlspecialchars($pconfig['ipblock']);?>">
- /
+ /
<select name="prefix" class="formfld">
<?php for ($i = 29; $i > 19; $i--): ?>
<option value="<?=$i;?>" <?php if ($i == $pconfig['prefix']) echo "selected"; ?>>
@@ -235,42 +235,42 @@ $pconfig = $config['ovpn']['server'];
<br>
Enter the IP address block for the OpenVPN server and clients to use.<br>
<br>
- Maximum number of simultaneous clients:
+ Maximum number of simultaneous clients:
<input name="maxcli" type="text" class="formfld" size="3" maxlength="3" value="<?=htmlspecialchars($pconfig['maxcli']);?>">
</td>
</tr>
-
- <tr>
+
+ <tr>
<td width="22%" valign="top" class="vncellreq">CA certificate</td>
- <td width="78%" class="vtable">
+ <td width="78%" class="vtable">
<textarea name="ca_cert" cols="65" rows="4" class="formpre"><?=htmlspecialchars(base64_decode($pconfig['ca_cert']));?></textarea>
<br>
- Paste a CA certificate in X.509 PEM format here.</td>
+ Paste a CA certificate in X.509 PEM format here. <a target="_new" href='vpn_openvpn_create_certs.php'>Create</a> all certificates.</td>
</tr>
-
- <tr>
+
+ <tr>
<td width="22%" valign="top" class="vncellreq">Server certificate</td>
<td width="78%" class="vtable">
<textarea name="srv_cert" cols="65" rows="4" class="formpre"><?=htmlspecialchars(base64_decode($pconfig['srv_cert']));?></textarea>
<br>
Paste a server certificate in X.509 PEM format here.</td>
</tr>
-
- <tr>
+
+ <tr>
<td width="22%" valign="top" class="vncellreq">Server key</td>
- <td width="78%" class="vtable">
+ <td width="78%" class="vtable">
<textarea name="srv_key" cols="65" rows="4" class="formpre"><?=htmlspecialchars(base64_decode($pconfig['srv_key']));?></textarea>
<br>Paste the server RSA private key here.</td>
</tr>
-
- <tr>
+
+ <tr>
<td width="22%" valign="top" class="vncellreq">DH parameters</td>
- <td width="78%" class="vtable">
+ <td width="78%" class="vtable">
<textarea name="dh_param" cols="65" rows="4" class="formpre"><?=htmlspecialchars(base64_decode($pconfig['dh_param']));?></textarea>
- <br>
+ <br>
Paste the Diffie-Hellman parameters in PEM format here.</td>
</tr>
-
+
<tr>
<td width="22%" valign="top" class="vncell">Crypto</td>
<td width="78%" class="vtable">
@@ -288,7 +288,7 @@ $pconfig = $config['ovpn']['server'];
<br>
Select a data channel encryption cipher.</td>
</tr>
-
+
<tr>
<td width="22%" valign="top" class="vncell">Internal routing mode</td>
<td width="78%" class="vtable">
@@ -296,7 +296,7 @@ $pconfig = $config['ovpn']['server'];
<strong>Enable client-to-client routing</strong><br>
If this option is on, clients are allowed to talk to each other.</td>
</tr>
-
+
<tr>
<td width="22%" valign="top" class="vncell">Client authentication</td>
<td width="78%" class="vtable">
@@ -304,7 +304,7 @@ $pconfig = $config['ovpn']['server'];
<strong>Permit duplicate client certificates</strong><br>
If this option is on, clients with duplicate certificates will not be disconnected.</td>
</tr>
-
+
<tr>
<td width="22%" valign="top" class="vncell">Client-push options</td>
<td width="78%" class="vtable">
diff --git a/usr/local/www/vpn_openvpn_create_certs.php b/usr/local/www/vpn_openvpn_create_certs.php
new file mode 100755
index 0000000..f3f6fea
--- /dev/null
+++ b/usr/local/www/vpn_openvpn_create_certs.php
@@ -0,0 +1,357 @@
+#!/usr/local/bin/php
+<?php
+/*
+ system_advanced_create_certs.php
+ part of pfSense
+
+ Copyright (C) 2004 Scott Ullrich
+ All rights reserved.
+
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions are met:
+
+ 1. Redistributions of source code must retain the above copyright notice,
+ this list of conditions and the following disclaimer.
+
+ 2. Redistributions in binary form must reproduce the above copyright
+ notice, this list of conditions and the following disclaimer in the
+ documentation and/or other materials provided with the distribution.
+
+ THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
+ INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
+ AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
+ OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+ SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+ INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+ CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ POSSIBILITY OF SUCH DAMAGE.
+*/
+
+require("guiconfig.inc");
+
+function get_file_contents($filename) {
+ $filecontents = "";
+ if(file_exists($filename)) {
+ $fd = fopen($filename, "r");
+ $tmp = fread($fd,8096);
+ $filecontents .= $tmp;
+ fclose($fd);
+ return $filecontents;
+ }
+ return "File not found " . $filename;
+}
+
+function execute_command_return_output($command) {
+ $fd = popen($command . " 2>&1 ", "r");
+ echo "\n<script language=\"JavaScript\">this.document.forms[0].output.value = \"\";</script>";
+ $counter = 0;
+ $counter2 = 0;
+ while(!feof($fd)) {
+ $tmp = fread($fd,49);
+ $tmp1 = ereg_replace("\n","\\n", $tmp);
+ $text = ereg_replace("\"","'", $tmp1);
+ if($lasttext == "..") {
+ $text = "";
+ $lasttext = "";
+ $counter=$counter-2;
+ } else {
+ $lasttext .= $text;
+ }
+ if($counter > 55) {
+ $counter = 0;
+ $extrabreak = "\\n";
+ } else {
+ $extrabreak = "";
+ $counter++;
+ }
+ if($counter2 > 600) {
+ echo "\n<script language=\"JavaScript\">this.document.forms[0].output.value = \"\";</script>";
+ $counter2 = 0;
+ } else
+ $counter2++;
+ echo "\n<script language=\"JavaScript\">this.document.forms[0].output.value = this.document.forms[0].output.value + \"" . $text . $extrabreak . "\"; f('output'); </script>";
+ }
+ fclose($fd);
+}
+
+$fd = fopen("/etc/ssl/openssl.cnf", "r");
+$openssl = fread($fd,8096);
+fclose($fd);
+
+/* Lets match the fileds in the read in file and
+ populate the variables for the form */
+preg_match('/\nC\=(.*)\n/', $openssl, $countrycodeA);
+preg_match('/\nST\=(.*)\n/', $openssl, $stateorprovinceA);
+preg_match('/\nL\=(.*)\n/', $openssl, $citynameA);
+preg_match('/\nO\=(.*)\n/', $openssl, $orginizationnameA);
+preg_match('/\nOU\=(.*)\n/', $openssl, $orginizationdepartmentA);
+preg_match('/\nCN\=(.*)\n/', $openssl, $commonnameA);
+
+$countrycode = $countrycodeA[1];
+$stateorprovince = $stateorprovinceA[1];
+$cityname = $citynameA[1];
+$orginizationname = $orginizationnameA[1];
+$orginizationdepartment = $orginizationdepartmentA[1];
+$commonname = $commonnameA[1];
+
+if ($_POST) {
+
+ /* Grab posted variables and create a new openssl.cnf */
+ $countrycode=$_POST['countrycode'];
+ $stateorprovince=$_POST['stateorprovince'];
+ $cityname=$_POST['cityname'];
+ $orginizationname=$_POST['orginizationname'];
+ $orginizationdepartment=$_POST['orginizationdepartment'];
+ $commonname=$_POST['commonname'];
+
+ /* Write out /etc/ssl/openssl.cnf */
+ $fd = fopen("/etc/ssl/openssl.cnf", "w");
+ fwrite($fd, "");
+ fwrite($fd, "[ req ]\n");
+ fwrite($fd, "distinguished_name=req_distinguished_name \n");
+ fwrite($fd, "req_extensions = v3_req \n");
+ fwrite($fd, "prompt=no\n");
+ fwrite($fd, "default_bits = 1024\n");
+ fwrite($fd, "default_keyfile = privkey.pem\n");
+ fwrite($fd, "distinguished_name = req_distinguished_name\n");
+ fwrite($fd, "attributes = req_attributes\n");
+ fwrite($fd, "x509_extensions = v3_ca # The extentions to add to the self signed cert\n");
+ fwrite($fd, "[ req_distinguished_name ] \n");
+ fwrite($fd, "C=" . $countrycode . " \n");
+ fwrite($fd, "ST=" . $stateorprovince. " \n");
+ fwrite($fd, "L=" . $cityname . " \n");
+ fwrite($fd, "O=" . $orginizationname . " \n");
+ fwrite($fd, "OU=" . $orginizationdepartment . " \n");
+ fwrite($fd, "CN=" . $commonname . " \n");
+ fwrite($fd, "[EMAIL PROTECTED] \n");
+ fwrite($fd, "[EMAIL PROTECTED] \n");
+ fwrite($fd, "[ v3_req ] \n");
+ fwrite($fd, "basicConstraints = critical,CA:FALSE \n");
+ fwrite($fd, "keyUsage = nonRepudiation, digitalSignature, keyEncipherment, dataEncipherment, keyAgreement \n");
+ fwrite($fd, "extendedKeyUsage=emailProtection,clientAuth \n");
+ fwrite($fd, "[ ca ]\n");
+ fwrite($fd, "default_ca = CA_default\n");
+ fwrite($fd, "[ CA_default ]\n");
+ fwrite($fd, "certificate = /tmp/ca.crt \n");
+ fwrite($fd, "private_key = /tmp/ca.key\n");
+ fwrite($fd, "dir = /tmp/\n");
+ fwrite($fd, "certs = /tmp/certs\n");
+ fwrite($fd, "crl_dir = /tmp/crl\n");
+ fwrite($fd, "database = /tmp/index.txt \n");
+ fwrite($fd, "new_certs_dir = /tmp/newcerts \n");
+ fwrite($fd, "serial = /tmp/serial \n");
+ fwrite($fd, "crl = /tmp/crl.pem \n");
+ fwrite($fd, "RANDFILE = /tmp/.rand \n");
+ fwrite($fd, "x509_extensions = usr_cert \n");
+ fwrite($fd, "name_opt = ca_default \n");
+ fwrite($fd, "cert_opt = ca_default \n");
+ fwrite($fd, "default_days = 365 \n");
+ fwrite($fd, "default_crl_days = 30 \n");
+ fwrite($fd, "default_md = md5 \n");
+ fwrite($fd, "preserve = no \n");
+ fwrite($fd, "policy = policy_match\n");
+ fwrite($fd, "[ policy_match ]\n");
+ fwrite($fd, "countryName = match\n");
+ fwrite($fd, "stateOrProvinceName = match\n");
+ fwrite($fd, "organizationName = match\n");
+ fwrite($fd, "organizationalUnitName = optional\n");
+ fwrite($fd, "commonName = supplied\n");
+ fwrite($fd, "emailAddress = optional\n");
+ fwrite($fd, "[ policy_anything ]\n");
+ fwrite($fd, "countryName = optional\n");
+ fwrite($fd, "stateOrProvinceName = optional\n");
+ fwrite($fd, "localityName = optional\n");
+ fwrite($fd, "organizationName = optional\n");
+ fwrite($fd, "organizationalUnitName = optional\n");
+ fwrite($fd, "commonName = supplied\n");
+ fwrite($fd, "emailAddress = optional\n");
+ fwrite($fd, "[ req_distinguished_name ]\n");
+ fwrite($fd, "countryName = US\n");
+ fwrite($fd, "[ req_attributes ]\n");
+ fwrite($fd, "challengePassword = A challenge password\n");
+ fwrite($fd, "unstructuredName = An optional company name\n");
+ fwrite($fd, "[ usr_cert ]\n");
+ fwrite($fd, "basicConstraints=CA:FALSE\n");
+ fwrite($fd, "[ v3_ca ]\n");
+ fwrite($fd, "subjectKeyIdentifier=hash\n");
+ fwrite($fd, "authorityKeyIdentifier=keyid:always,issuer:always\n");
+ fwrite($fd, "basicConstraints = CA:true\n");
+ fwrite($fd, "[ crl_ext ]\n");
+ fwrite($fd, "authorityKeyIdentifier=keyid:always,issuer:always\n");
+ fclose($fd);
+
+?>
+
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<html>
+<head>
+<script language="JavaScript">
+<!--
+function f(ta_id){
+ var d=document, ta, rng;
+ if(d.all){
+ ta=d.all[ta_id];
+ if(ta && ta.createTextRange){
+ rng=ta.createTextRange();
+ rng.collapse(false);
+ rng.select();
+ } else {
+ ta_id.focus();
+ ta_id.select();
+ ta_id.blur();
+ }
+ }
+}
+-->
+</script>
+<title><?=gentitle("System: Advanced functions");?></title>
+<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
+<link href="gui.css" rel="stylesheet" type="text/css">
+<body link="#0000CC" vlink="#0000CC" alink="#0000CC">
+<form action="system_advanced_create_certs.php" method="post" name="iform" id="iform">
+<?php include("fbegin.inc"); ?>
+ <p class="pgtitle">System: Advanced functions - Create Certificates</p>
+ <?php if ($input_errors) print_input_errors($input_errors); ?>
+ <?php if ($savemsg) print_info_box($savemsg); ?>
+ <p>
+ <textarea cols="55" rows="1" name="status" id="status" wrap="hard">One moment please... This will take a while!</textarea>
+ <textarea cols="55" rows="25" name="output" id="output" wrap="hard"></textarea>
+<?php include("fend.inc"); ?>
+</body>
+</html>
+
+ <?php
+
+ echo "<script language=\"JavaScript\">document.forms[0].status.value=\"Creating CA...\";</script>";
+ mwexec("rm -rf /tmp/newcerts");
+ mwexec("mkdir /tmp/newcerts");
+ mwexec("touch /tmp/index.txt");
+ $fd = fopen("/tmp/serial","w");
+ fwrite($fd, "01");
+ fclose($fd);
+
+ execute_command_return_output("cd /tmp/ && openssl req -nodes -new -x509 -keyout ca.key -out ca.crt -days 3650 -config /etc/ssl/openssl.cnf");
+ echo "\n<script language=\"JavaScript\">document.forms[0].status.value=\"Creating Server Certificates...\";</script>";
+ execute_command_return_output("cd /tmp/ && openssl req -nodes -new -keyout office.key -out office.csr -config /etc/ssl/openssl.cnf");
+ execute_command_return_output("cd /tmp/ && openssl ca -out /tmp/office.crt -in office.csr -config /etc/ssl/openssl.cnf -batch");
+ echo "\n<script language=\"JavaScript\">document.forms[0].status.value=\"Creating DH Parms...\";</script>";
+ execute_command_return_output("cd /tmp/ && openssl dhparam -out dh1024.pem 1024");
+ echo "\n<script language=\"JavaScript\">document.forms[0].status.value=\"Done!\";</script>";
+ //CLIENT
+ //mwexec("openssl req -nodes -new -keyout home.key -out home.csr");
+ //mwexec("openssl ca -out home.crt -in home.csr");
+
+ $cacertA = get_file_contents("/tmp/ca.crt");
+ $serverkeyA = get_file_contents("/tmp/office.key");
+ $servercertA = get_file_contents("/tmp/office.pem");
+ $dhpemA = get_file_contents("/tmp/dh1024.pem");
+
+ $cacert = ereg_replace("\n","\\n", $cacertA);
+ $serverkey = ereg_replace("\n","\\n", $serverkeyA);
+ $dhpem = ereg_replace("\n","\\n", $dhpemA);
+ $servercert = ereg_replace("\n","\\n", $servercertA);
+
+ //$tmp = strstr($servercertA, "-----BEGIN CERTIFICATE-----");
+ //$servercertA = ereg_replace("\n","\\n", $tmp);
+
+ ?>
+ <script language="JavaScript">
+ <!--
+ var ca_cert ='<?= $cacert ?>';
+ var srv_key ='<?= $serverkey ?>';
+ var srv_cert ='<?= $servercert ?>';
+ var dh_param ='<?= $dhpem ?>';
+ opener.document.forms[0].ca_cert.value=ca_cert;
+ opener.document.forms[0].srv_key.value=srv_key;
+ opener.document.forms[0].srv_cert.value=srv_cert;
+ opener.document.forms[0].dh_param.value=dh_param;
+ this.close();
+ -->
+ </script>
+
+
+<?php
+
+} else {
+
+?>
+
+ <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+ <html>
+ <head>
+ <title><?=gentitle("OpenVPN: Create Certificates");?></title>
+ <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
+ <link href="gui.css" rel="stylesheet" type="text/css">
+ <body link="#0000CC" vlink="#0000CC" alink="#0000CC">
+ <form action="vpn_openvpn_create_certs.php" method="post" name="iform" id="iform">
+ <?php include("fbegin.inc"); ?>
+ <p class="pgtitle">System: Advanced - Create Certificates</p>
+
+ <table width="100%" border="0" cellpadding="6" cellspacing="0">
+ <tr>
+ <td width="35%" valign="top" class="vncell"><B>Country Code (2 Letters)</td>
+ <td width="78%" class="vtable">
+ <input name="countrycode" value="<?=$countrycode?>">
+ </span></td>
+ </tr>
+
+ <tr>
+ <td width="35%" valign="top" class="vncell"><B>State or Province name</td>
+ <td width="78%" class="vtable">
+ <input name="stateorprovince" value="<?=$stateorprovince?>">
+ </span></td>
+ </tr>
+
+ <tr>
+ <td width="35%" valign="top" class="vncell"><B>City name</td>
+ <td width="78%" class="vtable">
+ <input name="cityname" value="<?=$cityname?>">
+ </span></td>
+ </tr>
+
+ <tr>
+ <td width="35%" valign="top" class="vncell"><B>Organization name</td>
+ <td width="78%" class="vtable">
+ <input name="orginizationname" value="<?=$orginizationname?>">
+ </span></td>
+ </tr>
+
+ <tr>
+ <td width="35%" valign="top" class="vncell"><B>Organization department</td>
+ <td width="78%" class="vtable">
+ <input name="orginizationdepartment" value="<?=$orginizationdepartment?>">
+ </span></td>
+ </tr>
+
+ <tr>
+ <td width="35%" valign="top" class="vncell"><B>Common Name (Your name)</td>
+ <td width="78%" class="vtable">
+ <input name="commonname" value="<?=$commonname?>">
+ </span></td>
+ </tr>
+
+ <!--
+ <tr>
+ <td width="35%" valign="top" class="vncell"><B>E-Mail address</td>
+ <td width="78%" class="vtable">
+ <input name="email" value="<?=$email?>">
+ </span></td>
+ </tr>
+ -->
+
+ <tr>
+ <td width="35%" valign="top">&nbsp;</td>
+ <td width="78%">
+ <input name="Submit" type="submit" class="formbtn" value="Save">
+ </td>
+ </tr>
+
+ <?php include("fend.inc"); ?>
+ </body>
+ </html>
+
+<?php
+}
+?>
OpenPOWER on IntegriCloud