From 913adaeabf39417f08fe829c7489842294181236 Mon Sep 17 00:00:00 2001 From: Sun Knudsen Date: Wed, 11 Nov 2020 17:44:16 -0500 Subject: [PATCH] Fixed broken anchors --- docs/README.md | 2 +- .../README.md | 14 ++++++++------ 2 files changed, 9 insertions(+), 7 deletions(-) diff --git a/docs/README.md b/docs/README.md index 43a72d7..d5065d2 100644 --- a/docs/README.md +++ b/docs/README.md @@ -35,7 +35,7 @@ Please use comments on [YouTube](https://www.youtube.com/sunknudsen) or [PeerTub ### Step 3: review guide and submit recommendations using [issues](https://github.com/sunknudsen/privacy-guides/issues) -Once consensus has been reached (issues are closed) and updated guide has been published to [draft.sunknudsen.com](https://draft.sunknudsen.com/), time for [step 4](#step-4-append-yourself-to). +Once consensus has been reached (issues are closed) and updated guide has been published to [draft.sunknudsen.com](https://draft.sunknudsen.com/), time for [step 4](#step-4-append-yourself-to-reviewers-comma-separated). ### Step 4: append yourself to `Reviewers` (comma-separated) diff --git a/how-to-self-host-a-hardened-strongswan-ikev2-ipsec-vpn-server-for-ios-and-macos/README.md b/how-to-self-host-a-hardened-strongswan-ikev2-ipsec-vpn-server-for-ios-and-macos/README.md index 3474384..9d2f1b5 100644 --- a/how-to-self-host-a-hardened-strongswan-ikev2-ipsec-vpn-server-for-ios-and-macos/README.md +++ b/how-to-self-host-a-hardened-strongswan-ikev2-ipsec-vpn-server-for-ios-and-macos/README.md @@ -29,10 +29,10 @@ Listed: true ### Step 1: create SSH key pair -For increased security, protect private key using strong passphrase. - When asked for file in which to save key, enter `vpn-server`. +When asked for passphrase, use output from `openssl rand -base64 24` (and store passphrase in password manager). + Use `vpn-server.pub` public key when setting up server. ```console @@ -76,7 +76,9 @@ ssh root@185.193.126.203 -i ~/.ssh/vpn-server ### Step 3: create `vpn-server-admin` user -When asked for password, use output from `openssl rand -base64 24` (and store password in password manager). All other fields are optional, press enter to skip them and then press Y. +When asked for password, use output from `openssl rand -base64 24` (and store password in password manager). + +All other fields are optional, press enter to skip them and then press Y. ```console $ adduser vpn-server-admin @@ -144,7 +146,7 @@ sed -i -E 's/(#)?PasswordAuthentication yes/PasswordAuthentication no/' /etc/ssh systemctl restart ssh ``` -### Step 10: update apt index files and upgrade packages +### Step 10: update APT index files and upgrade packages #### Update apt index files @@ -755,7 +757,7 @@ In “General”, enter “Self-hosted strongSwan VPN” in “Name”. ![apple-configurator-general](apple-configurator-general.png?shadow=1) -In “Certificates”, click “Configure” and select “ca.crt”. Then click “+” and select “john.p12”. The password is the one from [step 28](#step-28-generate-client-cert). +In “Certificates”, click “Configure” and select “ca.crt”. Then click “+” and select “john.p12”. The password is the one from [step 27](#step-27-generate-client-cert). ![apple-configurator-certificates](apple-configurator-certificates.png?shadow=1) @@ -807,4 +809,4 @@ Make sure listed IPv4, IPv6 (if server is dual stack) and DNS servers do not mat ### Step 36: create additional provisioning profiles -Repeat steps [24](#step-24-create-openssl-config-file), [27](#step-27-generate-client-cert) and [31](#step-31-create-vpn-profile-for-ios-and-macos-using). +Repeat steps [24](#step-24-create-openssl-config-file), [27](#step-27-generate-client-cert) and [31](#step-31-create-vpn-profile-for-ios-and-macos-using-apple-configurator-2).