๐ก openfortivpn CLI: Fortinet SSL-VPN Tunnel โ Executive Summary
Technical architectural analysis, practical configuration manifests, and deployment instructions for openfortivpn CLI: Fortinet SSL-VPN Tunnel.
bash
# ํจํค์ง ์ค์น
brew install openfortivpn
# ๊ณ์ ์ ๋ณด๋ฅผ ์ด์ฉํ์ฌ ์คํ
sudo openfortivpn {{ ์๊ฒฉ ๊ฒ์ดํธ์จ์ด }}:{{ ํฌํธ }} \
--username={{ ์์ด๋ }} \
--password={{ ํจ์ค์๋ }}
# ์๋ฌ๋ก๊ทธ ํ์ธ: 'trusted-cert = '๋ท๋ถ๋ถ ๋ณต์ฌ: ex) faa3576e871f015a55d71910ba63cf9818e24fc92727d80e0665e4c759533eb7
>>>
ERROR: Gateway certificate validation failed, and the certificate digest is not in the local whitelist. If you trust it, rerun with:
ERROR: --trusted-cert faa3576e871f015a55d71910ba63cf9818e24fc92727d80e0665e4c759533eb7
ERROR: or add this line to your configuration file:
ERROR: trusted-cert = faa3576e871f015a55d71910ba63cf9818e24fc92727d80e0665e4c759533eb7
ERROR: Gateway certificate:
ERROR: subject:
ERROR: C=US
ERROR: ST=California
ERROR: L=Sunnyvale
ERROR: O=Fortinet
ERROR: OU=FortiGate
ERROR: CN=FGT80ETK20016241
ERROR: [email protected]
ERROR: issuer:
ERROR: C=US
ERROR: ST=California
ERROR: L=Sunnyvale
ERROR: O=Fortinet
ERROR: OU=Certificate Authority
ERROR: CN=support
ERROR: [email protected]
ERROR: sha256 digest:
ERROR: faa3576e871f015a55d71910ba63cf9818e24fc92727d80e0665e4c759533eb7
INFO: Closed connection to gateway.
ERROR: Gateway certificate validation failed, and the certificate digest is not in the local whitelist. If you trust it, rerun with:
ERROR: --trusted-cert faa3576e871f015a55d71910ba63cf9818e24fc92727d80e0665e4c759533eb7
ERROR: or add this line to your configuration file:
ERROR: trusted-cert = faa3576e871f015a55d71910ba63cf9818e24fc92727d80e0665e4c759533eb7
ERROR: Gateway certificate:
ERROR: subject:
ERROR: C=US
ERROR: ST=California
ERROR: L=Sunnyvale
ERROR: O=Fortinet
ERROR: OU=FortiGate
ERROR: CN=FGT80ETK20016241
ERROR: [email protected]
ERROR: issuer:
ERROR: C=US
ERROR: ST=California
ERROR: L=Sunnyvale
ERROR: O=Fortinet
ERROR: OU=Certificate Authority
ERROR: CN=support
ERROR: [email protected]
ERROR: sha256 digest:
ERROR: faa3576e871f015a55d71910ba63cf9818e24fc92727d80e0665e4c759533eb7
INFO: Could not log out.
<<<
Method 1: config
bash
# configํ์ผ ์์
vi /opt/homebrew/etc/openfortivpn/openfortivpn/config
---
### configuration file for openfortivpn, see man openfortivpn(1) ###
host = {{ ์๊ฒฉ ๊ฒ์ดํธ์จ์ด }}
port = {{ ํฌํธ }}
username = {{ ์์ด๋ }}
password = {{ ๋น๋ฐ๋ฒํธ }}
# ์๋ฌ๋ก๊ทธ ๋ด์ ์ธ์ฆ์
trusted-cert = {{ ์ธ์ฆ์ }}
bash
# ์คํ
sudo openfortivpn
sshpass -pbackup12#$ ssh [email protected]
Method 2: flags
bash
sudo openfortivpn {{ ์๊ฒฉ ๊ฒ์ดํธ์จ์ด }}:{{ ํฌํธ }} \
--username={{ ์์ด๋ }} \
--password={{ ๋น๋ฐ๋ฒํธ }} \
--trusted-cert {{ ์ธ์ฆ์ }}




Leave a Reply