similar to: multiple nodes/servers

Thank you Lars for the reply. Your instructions were dead on. Yes I have considered the security risks; however, I think scaleability and rapid deployment out weigh the security risks for me. On Aug 18, 2015, at 6:31 AM, Lars Kruse <lists at sumpfralle.de> wrote: > Hi, > >> Is it possible to generate one key pair? > > Maybe this is all you want to know? > openssl

Hi, I needed to convert a public RSA key to autorized_keys format and found ssh-keygen lacking this feature. I made the option -Q publicfile to allow an conversion like ssh-keygen -Q pubrsa.pem -y The patch is produced using unified diff and made on latest release. If you like it and can make a patch for the man-page also! Regards, /Lars -------------- next part -------------- diff -u

Hi together, i have a tinc vpn running on several local networks as well as on clients and am writing on a little "zeroconfig" tool to add new (newbie) clients to the net without having to vnc to them for ages. To do this easier, i wanted to have a possibility to check somehow if the public key stored on the server mathes the provate key on the client, or if it needs to be regenerated.

Hi, > Is it possible to generate one key pair? Maybe this is all you want to know? openssl genrsa -out private.key 4096 openssl rsa -pubout -in private.key -out public.key I assume that you analyzed the risks and benefits of a single shared key according to your specific setup. Lars

Hi, Tinc expert If there’re multiple tinc nodes announce default route in their host configuration of Subnet = 0.0.0.0/0, how for the remaining nodes to select which is the best route to get out? All of them participant in the same tinc net. I did some test, like A as the branch, B,C,D as the nodes to announce default route; when all up , A select B, but if B down, A will go C, C down, A will

Is it possible to connect networks with different masks together? For example a 10.26.0.0/16 subnet with a 192.168.117.0/24 subnet. See this thread for more details... https://forum.netgate.com/topic/134218/tinc-initial-setup

Lars, interesting - do you have an example of what that might look like in the config file? Thanks! On Sun, May 5, 2019 at 6:00 PM Lars Kruse <lists at sumpfralle.de> wrote: > Hello Christoph, > > I am glad, that you discovered the source of the problem! > > > Am Sat, 4 May 2019 08:30:28 +0200 > schrieb "Christopher Klinge" <Christ.Klinge at web.de>:

Hi, Lars Thanks for your suggestion, will give it a try later to see how it performs. But, yesterday, I did a below test: A ConnectTo B and C, B ConnectTo D, C ConnectTo D; All nodes turned "IndirectData" on in its host configuration, so the tunnel only follow metacomnection instead of direct connect. D announced default route by having the Subnet = 0.0.0.0/0 statement in its host

Hello Ramses, Am Sat, 31 Mar 2018 17:21:52 +0200 schrieb Ramses <ramses.sevilla at gmail.com>: > Can tell me someone if there is any repository to Raspbian that has Tinc v1.1 > to update a installed Tinc v1.0 from command apt-get? thankfully the Debian package maintainer for tinc (Guus) prepared a package and uploaded it to the "experimental" suite:

Hello Guus, is there a .deb somewhere for tinc 1.1 and ubuntu 15.10 available / instruction on howto build .deb files for ubuntu ? Then I could put something together with python or the shell, inotify of the tinc graph file and tinc info. Thanks+ BR Max. > On Fri, Jan 22, 2016 at 02:12:20PM +0100, Maximilian H. wrote: > >> I am using tinc's feature to dump a graph of the

Hello Ramses, Am Sat, 31 Mar 2018 22:03:25 +0200 schrieb Ramses <ramses.sevilla at gmail.com>: > But what repository I need to add to the sources.list file? the internet out there would have told you :) https://wiki.debian.org/DebianExperimental Be sure to understand, that this suite contains packages of undefined quality (this is the purpose of this suite). Do not dare to install

Is there any way to obtain the public key from the private key? I know it's in host file however for the purpose of this message I need to be able to generate it on the command line. I tried openssl ec < ed25519_key.priv I get an error read EC key unable to load Key 140092556813984:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:703:Expecting: ANY PRIVATE KEY

Hello Ramses, Am Sun, 01 Apr 2018 01:44:01 +0200 schrieb Ramses <ramses.sevilla at gmail.com>: > [..] > > Correct? in general, this is exactly the right procedure. > I have installed Raspbian 7 (Wheezy). I will have problems doing this > proccess un Raspbian? Raspbian (being derived from Debian) is not a problem. The old base distribution (wheezy) is a problem. In the

I looked on the openssl man page but am too dense with commands to understand what I need to do..... Ran into problems generating a key and CSR for SSL, because the web site is on a server with an old Ensim Control Panel. Please someone knowledgeable, give me the openssl commands I need to use, after I ssh into the web site, to generate a 2048 bit key and csr. TIA and Happy New Year!

Hello Julien, Am Tue, 15 Jan 2019 16:33:26 +0100 schrieb Julien dupont <marcelvierzon at gmail.com>: > ip_forward was not enabled, now it is. a good step forward :) (you should do this permanently via /etc/sysctl.d/) > 'iptables -L -vn' yields: > [..] OK. The output tells us, that there are firewall rules. Now you should take a look at your firewall configuration

Is there performance issue with Tinc compared to alternatives? Is it still single threaded? -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20180314/985dfc11/attachment.html>

Hi Lars, Am 20.03.20 um 15:43 schrieb Lars Kruse: > Did you really try the nice visualizations in the "Statistics" menu? > These should allow you to see, which protocols and which peers cause the > traffic. > > I am slightly confused, that you already took a look at the traffic, but you did > not mention, which type of traffic makes up the bulk of the excessive packets

Hi, I am trying to setup a VPN between roaming users and the office. Main usage will be VNC sessions to some Linux computers sitting on the office LAN. One machine on the office LAN, VPN_office, is dedicated to run tinc. The office router is behind another router for which we have no control, so I contracted an external computer VPN_out with a public IP to act as an in between connection. All

I just found that the VPN Netmask option in the pfSense tinc GUI is related to the "netmask" option in /usr/local/etc/tinc/tinc-up ifconfig $INTERFACE 192.168.117.1 netmask 255.255.0.0 What exactly is this line doing? Is it assigning the address that my lan adapter has to the tunnel interface as well? I'm interested in using tinc in production, so I'm trying to learn as much