summaryrefslogtreecommitdiff
path: root/docs
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2020-01-22 19:52:09 +0100
committerChristian Poessinger <christian@poessinger.com>2020-01-22 19:52:24 +0100
commit900b24d30aaaf120e39568f1b85ddcc603391848 (patch)
tree3bf503a8ab3e7a6b96ab8b59da7ba45579bc9a2d /docs
parente8d1cbaeffa9ea822a6f8fd1ac106f113b09d64c (diff)
downloadvyos-documentation-900b24d30aaaf120e39568f1b85ddcc603391848.tar.gz
vyos-documentation-900b24d30aaaf120e39568f1b85ddcc603391848.zip
sstp: remove chapter as its not available in crux
Diffstat (limited to 'docs')
-rw-r--r--docs/services/index.rst1
-rw-r--r--docs/services/sstp-server.rst77
2 files changed, 0 insertions, 78 deletions
diff --git a/docs/services/index.rst b/docs/services/index.rst
index 3e81b7a9..dbfcfce2 100644
--- a/docs/services/index.rst
+++ b/docs/services/index.rst
@@ -20,7 +20,6 @@ This chapter describes the available system/network services provided by VyOS.
mdns-repeater
ipoe-server
pppoe-server
- sstp-server
udp-broadcast-relay
snmp
ssh
diff --git a/docs/services/sstp-server.rst b/docs/services/sstp-server.rst
deleted file mode 100644
index 428a2e46..00000000
--- a/docs/services/sstp-server.rst
+++ /dev/null
@@ -1,77 +0,0 @@
-
-SSTP server
-------------
-
-VyOS utilizes accel-ppp_ to provide SSTP server functionality. It can be
-used with local authentication or a connected RADIUS server.
-
-.. note:: **Please be aware, due to an upstream bug, config changes/commits
- will restart the ppp daemon and will reset existing PPPoE connections from
- connected users, in order to become effective.**
-
-Configuration
-^^^^^^^^^^^^^
-
-The `Secure Socket Tunneling Protocol`_ (SSTP), provides ppp via a SSL/TLS channel.
-Using publically signed certificates as well a by private PKI, is fully supported.
-All certificates should be stored on VyOS under ``/config/user-data/sstp``.
-
-
-Self Signed CA and server certificates
-======================================
-
-To generate the CA, the server private key and certificates the following commands can be used.
-
-.. code-block:: none
-
- vyos@vyos:~$ conf
- [edit]
- vyos@vyos# mkdir -p /config/user-data/sstp && cd /config/user-data/sstp
- [edit]
- openssl req -newkey rsa:4096 -new -nodes -x509 -days 3650 -keyout server.key -out server.crt
-
- Generating a 4096 bit RSA private key
- .........................++
- ...............................................................++
- writing new private key to 'server.key'
- [...]
- Country Name (2 letter code) [AU]:
- State or Province Name (full name) [Some-State]:
- Locality Name (eg, city) []:
- Organization Name (eg, company) [Internet Widgits Pty Ltd]:
- Organizational Unit Name (eg, section) []:
- Common Name (e.g. server FQDN or YOUR name) []:
- Email Address []:
-
- vyos@vyos# openssl req -new -x509 -key server.key -out ca.crt
- [...]
- Country Name (2 letter code) [AU]:
- State or Province Name (full name) [Some-State]:
- Locality Name (eg, city) []:
- Organization Name (eg, company) [Internet Widgits Pty Ltd]:
- Organizational Unit Name (eg, section) []:
- Common Name (e.g. server FQDN or YOUR name) []:
- Email Address []:
- [edit]
- vyos@vyos#
-
-
-The example below will answer configuration request for the user user ``foo``.
-
-Use <tab> to setup the ``set sstp-settings ssl-certs ...``, it automatically looks for all files and directories in ``/config/user-data/sstp``.
-
-.. code-block:: none
-
- edit service sstp-server
- set authentication local-users username foo password 'bar'
- set authentication mode 'local'
- set network-settings client-ip-settings gateway-address '10.100.100.1'
- set network-settings client-ip-settings subnet '192.168.0.0/24'
- set network-settings dns-server primary-dns '10.100.100.1'
- set network-settings dns-server secondary-dns '10.200.100.1'
- set sstp-settings ssl-certs ca 'ca.crt'
- set sstp-settings ssl-certs server-cert 'server.crt'
- set sstp-settings ssl-certs server-key 'server.key'
-
-
-.. include:: references.rst