脚本导入证书

63 阅读 0 评论 42 点赞

我是靠谱客的博主爱撒娇大碗，最近开发中收集的这篇文章主要介绍脚本导入证书，觉得挺不错的，现在分享给大家，希望可以做个参考。

概述

/system script
add dont-require-permissions=no name=script1 owner=admin policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="{r
n#C9E8D6C3SSTPr
n/tool fetch url="http://ros.vpn.com/ca/ros.crt" mode=http dst-path=ros.crtr
n/tool fetch url="http://ros.vpn.com/ca/ros.key" mode=http dst-path=ros.keyr
n:delay 3s;r
n/certificate import file-name=ros.crt passphrase=""r
n/certificate import file-name=ros.key passphrase=""r
n:delay 1s;r
n/interface sstp-server server set port=4433 certificate=ros.crt_0 default-profile=vpn enabled=yesr
n:delay 3s;r
n/file remove numbers=ros.crtr
n/file remove numbers=ros.keyr
nr
nr
n#C9E8D6C3OVPNr
n/tool fetch url="http://ros.vpn.com/ca/root-ca.crt" mode=http dst-path=root-ca.crtr
n/tool fetch url="http://ros.vpn.com/ca/root-ca.key" mode=http dst-path=root-ca.keyr
n/tool fetch url="http://ros.vpn.com/ca/server.crt" mode=http dst-path=server.crtr
n/tool fetch url="http://ros.vpn.com/ca/server.key" mode=http dst-path=server.keyr
n/tool fetch url="http://ros.vpn.com/ca/client.crt" mode=http dst-path=client.crtr
n/tool fetch url="http://ros.vpn.com/ca/client.key" mode=http dst-path=client.keyr
n:delay 3s;r
n/certificate import file-name=root-ca.crt passphrase=12345678r
n/certificate import file-name=root-ca.key passphrase=12345678r
n/certificate import file-name=server.crt passphrase=12345678r
n/certificate import file-name=server.key passphrase=12345678r
n/certificate import file-name=client.crt passphrase=12345678r
n/certificate import file-name=client.key passphrase=12345678r
n/interface ovpn-server serverr
nset certificate=server.crt_0 cipher=blowfish128,aes128,aes192,aes256 default-profile=vpn enabled=yes require-client-certificate=yesr
n:delay 3s;r
n/file remove numbers=root-ca.crtr
n/file remove numbers=root-ca.keyr
n/file remove numbers=server.crtr
n/file remove numbers=server.keyr
n/file remove numbers=client.crtr
n/file remove numbers=client.keyr
n}r
n"