randyqx / apricot-sec2019 Goto Github PK

Adding these under Issues, though they are more of suggestions which could be helpful for participants of the workshop & added in the slides. If you want me to send these using an alternative medium(email?), please let me know.

I have found debugging errors (syntax etc) in BIND to be really hard to track down. During the lab, was going in circles till I used a couple of commands which pointed the error. Attached is the screenshot.

• To check for errors in a zone file
  named-checkzone group19.workshop /etc/bind/group19.workshop
named-checkzone zonefilename /etc/bind/path/to/zone/file

• To check for errors in named.conf
  named-checkconf /etc/named.conf

Just tried this on Ubuntu and I am not sure why anyone using Linux in the workshop didn't report this.

Files missing -

• pfs-udp-1194-Tokyo_OpenVPN.p12
• pfs-udp-1194-Tokyo_OpenVPN-tls.key

Solution - Maybe pfsense also provides these files as well but I have gone ahead and created it manually using openssl.

• Create .p12 using,
  openssl pkcs12 -export -in cert.crt -inkey key.key -certfile ca.crt -out pfs-udp-1194-Tokyo_OpenVPN.p12

• Extracted the static key(ta.key) from Viscosity.visc and renamed it to pfs-udp-1194-Tokyo_OpenVPN-tls.key.

Attached is the set of files to be uploaded on https://psg.com/aprisec-sw/

Best,
Swapneel
openvpn-linux.zip