Search Results for wg genkey

WireGuard wg-quick PostUp的高级玩法

真的很高级。 wg-quick是WireGuard用来启动网络设备的**脚本**。注意了，迄今为止，wg-quick是用bash写的一个脚本，不知道未来会不会变，至少目前shebang是

!#/bin/bash

1	!#/bin/bash

Incoming search terms:WG-QUICKwireguard mtuwg genkeywireguard PostUp = 配置everyiygleavingx78ladyss1grain51lgivingqnhgivenjxigentlycfvfingerv55wireuguard 高级eager61ido68adidg91detaily92concernedc6zcharacteristicdmjas75uLink to this post!

EdgeRouter 部署 WireGuard

安装从 https://github.com/Lochnair/vyatta-wireguard/releases 下载对应的包 ERL, ER等 mips架构的，下载 octeon 版本 ERX 下载 ralink版本。可以选择上传到路由上，或者ssh登录路由，sudo su到root，执行类似如下的命令

curl https://github.com/Lochnair/vyatta-wireguard/releases/download/0.0.20170612-2/wireguard-octeon-0.0.20170612-2.deb -o wireguard-octeon-0.0.20170612-2.deb

1	curl https://github.com/Lochnair/vyatta-wireguard/releases/download/0.0.20170612-2/wireguard-octeon-0.0.20170612-2.deb -o wireguard-octeon-0.0.20170612-2.deb

或

curl https://github.com/Lochnair/vyatta-wireguard/releases/download/0.0.20170612-2/wireguard-ralink-0.0.20170612-2.deb -o wireguard-ralink-0.0.20170612-2.deb

1	curl https://github.com/Lochnair/vyatta-wireguard/releases/download/0.0.20170612-2/wireguard-ralink-0.0.20170612-2.deb -o wireguard-ralink-0.0.20170612-2.deb

下载完成后

dpkg -i xxx.deb

1	dpkg -i xxx.deb

配置执行下列命令生成私钥、共享密钥，公钥

wg genkey > /config/auth/wg.private
wg genpsk > /config/auth/wg.psk
chmod 0600 /config/auth/wg.*
wg pubkey < /config/auth/wg.private

wg genkey > /config/auth/wg.private

wg genpsk > /config/auth/wg.psk

chmod 0600 /config/auth/wg.*

wg pubkey < /config/auth/wg.private

将最后一个命令的输出复制下来，配置到服务器端获取服务器端的公钥，替换下文的“公钥”并执行命令

configure
set interfaces wireguard wg0 address 192.168.10.40/24
set interfaces wireguard wg0 listen-port 本地端口
set interfaces wireguard wg0 peer 公钥 allowed-ips 0.0.0.0/0
set interfaces wireguard wg0 peer 公钥 endpoint '服务器IP:端口'
set interfaces wireguard wg0 peer 公钥 preshared-key /config/auth/wg-eos.psk
set interfaces wireguard wg0 private-key /config/auth/wg.private
set interfaces wireguard wg0 route-allowed-ips false
commit
save

configure

set interfaces wireguard wg0 address 192.168.10.40/24

set interfaces wireguard wg0 listen-port 本地端口

set interfaces wireguard wg0 peer 公钥 allowed-ips 0.0.0.0/0

set interfaces wireguard wg0 peer 公钥 endpoint '服务器IP:端口'

set interfaces wireguard wg0 peer 公钥 preshared-key /config/auth/wg-eos.psk

set interfaces wireguard wg0 private-key /config/auth/wg.private

set interfaces wireguard wg0 route-allowed-ips false

commit

save

配置好设备后，配置nat服务

configure
set service nat rule 5032 outbound-interface wg0
set service nat rule 5032 type masquerade
commit 
save

configure

set service nat rule 5032 outbound-interface wg0

set service nat rule 5032 type masquerade

commit

save

剩下就是配置路由规则了，可以参考我的其他blog. Incoming search terms:wireguardwireguard edgerouteredgeos wiregaurdedgeos wireguardcryfbgdevelop2mbeaten3ndedge router wireguardflowftzterribleva9vapork91winter9qsyellowsa9Link to this post!

Few on DSA

I was looking into Jira’s licensing and chose to patch + keygen jars. I extracted the public key from class file, base64 decoded and then printed details using openssl:

$ openssl dsa -inform DER -in pub.dsa.DER -pubin -text
read DSA key
pub:
    00:8b:df:c1:e6:6f:98:6a:39:a2:dc:1a:c0:8d:e7:
    a3:b5:1d:6a:7c:5a:97:78:57:da:16:b0:f7:ad:8a:
    2f:f9:c7:42:b9:c2:e0:51:b6:3e:f5:05:7f:7e:0e:
    79:c4:8a:d4:ab:47:0c:f4:28:49:0f:83:1e:b7:dd:
    7f:ab:ca:50:9a:61:c3:42:a7:de:05:e6:e0:b4:bc:
    54:af:cb:ad:8e:e8:9f:fc:21:da:25:28:6d:2d:97:
    96:1b:88:a8:47:39:98:b0:14:bb:d1:dd:fb:5a:b1:
    b1:09:10:e7:47:74:97:32:ab:9c:3a:8f:b0:cd:16:
    03:d8:6d:91:d2:49:c3:69:d2
P:
    00:fd:7f:53:81:1d:75:12:29:52:df:4a:9c:2e:ec:
    e4:e7:f6:11:b7:52:3c:ef:44:00:c3:1e:3f:80:b6:
    51:26:69:45:5d:40:22:51:fb:59:3d:8d:58:fa:bf:
    c5:f5:ba:30:f6:cb:9b:55:6c:d7:81:3b:80:1d:34:
    6f:f2:66:60:b7:6b:99:50:a5:a4:9f:9f:e8:04:7b:
    10:22:c2:4f:bb:a9:d7:fe:b7:c6:1b:f8:3b:57:e7:
    c6:a8:a6:15:0f:04:fb:83:f6:d3:c5:1e:c3:02:35:
    54:13:5a:16:91:32:f6:75:f3:ae:2b:61:d7:2a:ef:
    f2:22:03:19:9d:d1:48:01:c7
Q:
    00:97:60:50:8f:15:23:0b:cc:b2:92:b9:82:a2:eb:
    84:0b:f0:58:1c:f5
G:
    00:f7:e1:a0:85:d6:9b:3d:de:cb:bc:ab:5c:36:b8:
    57:b9:79:94:af:bb:fa:3a:ea:82:f9:57:4c:0b:3d:
    07:82:67:51:59:57:8e:ba:d4:59:4f:e6:71:07:10:
    81:80:b4:49:16:71:23:e8:4c:28:16:13:b7:cf:09:
    32:8c:c8:a6:e1:3c:16:7a:8b:54:7c:8d:28:e0:a3:
    ae:1e:2b:b3:a6:75:91:6e:a3:7f:0b:fa:21:35:62:
    f1:fb:62:7a:01:24:3b:cc:a4:f1:be:a8:51:90:89:
    a8:83:df:e1:5a:e5:9f:06:92:8b:66:5e:80:7b:55:
    25:64:01:4c:3b:fe:cf:49:2a
writing DSA key
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

$ openssl dsa -inform DER -in pub.dsa.DER -pubin -text

read DSA key

pub:

00:8b:df:c1:e6:6f:98:6a:39:a2:dc:1a:c0:8d:e7:

a3:b5:1d:6a:7c:5a:97:78:57:da:16:b0:f7:ad:8a:

2f:f9:c7:42:b9:c2:e0:51:b6:3e:f5:05:7f:7e:0e:

79:c4:8a:d4:ab:47:0c:f4:28:49:0f:83:1e:b7:dd:

7f:ab:ca:50:9a:61:c3:42:a7:de:05:e6:e0:b4:bc:

54:af:cb:ad:8e:e8:9f:fc:21:da:25:28:6d:2d:97:

96:1b:88:a8:47:39:98:b0:14:bb:d1:dd:fb:5a:b1:

b1:09:10:e7:47:74:97:32:ab:9c:3a:8f:b0:cd:16:

03:d8:6d:91:d2:49:c3:69:d2

00:fd:7f:53:81:1d:75:12:29:52:df:4a:9c:2e:ec:

e4:e7:f6:11:b7:52:3c:ef:44:00:c3:1e:3f:80:b6:

51:26:69:45:5d:40:22:51:fb:59:3d:8d:58:fa:bf:

c5:f5:ba:30:f6:cb:9b:55:6c:d7:81:3b:80:1d:34:

6f:f2:66:60:b7:6b:99:50:a5:a4:9f:9f:e8:04:7b:

10:22:c2:4f:bb:a9:d7:fe:b7:c6:1b:f8:3b:57:e7:

c6:a8:a6:15:0f:04:fb:83:f6:d3:c5:1e:c3:02:35:

54:13:5a:16:91:32:f6:75:f3:ae:2b:61:d7:2a:ef:

f2:22:03:19:9d:d1:48:01:c7

00:97:60:50:8f:15:23:0b:cc:b2:92:b9:82:a2:eb:

84:0b:f0:58:1c:f5

00:f7:e1:a0:85:d6:9b:3d:de:cb:bc:ab:5c:36:b8:

57:b9:79:94:af:bb:fa:3a:ea:82:f9:57:4c:0b:3d:

07:82:67:51:59:57:8e:ba:d4:59:4f:e6:71:07:10:

81:80:b4:49:16:71:23:e8:4c:28:16:13:b7:cf:09:

32:8c:c8:a6:e1:3c:16:7a:8b:54:7c:8d:28:e0:a3:

ae:1e:2b:b3:a6:75:91:6e:a3:7f:0b:fa:21:35:62:

f1:fb:62:7a:01:24:3b:cc:a4:f1:be:a8:51:90:89:

a8:83:df:e1:5a:e5:9f:06:92:8b:66:5e:80:7b:55:

25:64:01:4c:3b:fe:cf:49:2a

writing DSA key

-----BEGIN PUBLIC KEY-----

MIIBuDCCASwGByqGSM44BAEwggEfAoGBAP1/U4EddRIpUt9KnC7s5Of2EbdSPO9E

AMMeP4C2USZpRV1AIlH7WT2NWPq/xfW6MPbLm1Vs14E7gB00b/JmYLdrmVClpJ+f

6AR7ECLCT7up1/63xhv4O1fnxqimFQ8E+4P208UewwI1VBNaFpEy9nXzrith1yrv

8iIDGZ3RSAHHAhUAl2BQjxUjC8yykrmCouuEC/BYHPUCgYEA9+GghdabPd7LvKtc

NrhXuXmUr7v6OuqC+VdMCz0HgmdRWVeOutRZT+ZxBxCBgLRJFnEj6EwoFhO3zwky

jMim4TwWeotUfI0o4KOuHiuzpnWRbqN/C/ohNWLx+2J6ASQ7zKTxvqhRkImog9/h

WuWfBpKLZl6Ae1UlZAFMO/7PSSoDgYUAAoGBAIvfweZvmGo5otwawI3no7Udanxa

l3hX2haw962KL/nHQrnC4FG2PvUFf34OecSK1KtHDPQoSQ+DHrfdf6vKUJphw0Kn

3gXm4LS8VK/LrY7on/wh2iUobS2XlhuIqEc5mLAUu9Hd+1qxsQkQ50d0lzKrnDqP

sM0WA9htkdJJw2nS

-----END PUBLIC KEY-----

This is a (1024,160) L/N pair, key size 1024 bits and length of Q is 160. from http://en.wikipedia.org/wiki/Digital_Signature_Algorithm I learnt: Per-user keys Given a set … Continue reading “Few on DSA”