openfortivpn CLI: Fortinet SSL-VPN Tunnel

๐Ÿ’ก openfortivpn CLI: Fortinet SSL-VPN Tunnel โ€” Executive Summary

Technical architectural analysis, practical configuration manifests, and deployment instructions for openfortivpn CLI: Fortinet SSL-VPN Tunnel.

bash
# ํŒจํ‚ค์ง€ ์„ค์น˜
brew install openfortivpn

# ๊ณ„์ •์ •๋ณด๋ฅผ ์ด์šฉํ•˜์—ฌ ์‹คํ–‰
sudo openfortivpn {{ ์›๊ฒฉ ๊ฒŒ์ดํŠธ์›จ์ด }}:{{ ํฌํŠธ }} \
 --username={{ ์•„์ด๋”” }} \
 --password={{ ํŒจ์Šค์›Œ๋“œ }}

# ์—๋Ÿฌ๋กœ๊ทธ ํ™•์ธ: 'trusted-cert = '๋’ท๋ถ€๋ถ„ ๋ณต์‚ฌ: ex) faa3576e871f015a55d71910ba63cf9818e24fc92727d80e0665e4c759533eb7
>>>
ERROR:  Gateway certificate validation failed, and the certificate digest is not in the local whitelist. If you trust it, rerun with:
ERROR:      --trusted-cert faa3576e871f015a55d71910ba63cf9818e24fc92727d80e0665e4c759533eb7
ERROR:  or add this line to your configuration file:
ERROR:      trusted-cert = faa3576e871f015a55d71910ba63cf9818e24fc92727d80e0665e4c759533eb7
ERROR:  Gateway certificate:
ERROR:      subject:
ERROR:          C=US
ERROR:          ST=California
ERROR:          L=Sunnyvale
ERROR:          O=Fortinet
ERROR:          OU=FortiGate
ERROR:          CN=FGT80ETK20016241
ERROR:          [email protected]
ERROR:      issuer:
ERROR:          C=US
ERROR:          ST=California
ERROR:          L=Sunnyvale
ERROR:          O=Fortinet
ERROR:          OU=Certificate Authority
ERROR:          CN=support
ERROR:          [email protected]
ERROR:      sha256 digest:
ERROR:          faa3576e871f015a55d71910ba63cf9818e24fc92727d80e0665e4c759533eb7
INFO:   Closed connection to gateway.
ERROR:  Gateway certificate validation failed, and the certificate digest is not in the local whitelist. If you trust it, rerun with:
ERROR:      --trusted-cert faa3576e871f015a55d71910ba63cf9818e24fc92727d80e0665e4c759533eb7
ERROR:  or add this line to your configuration file:
ERROR:      trusted-cert = faa3576e871f015a55d71910ba63cf9818e24fc92727d80e0665e4c759533eb7
ERROR:  Gateway certificate:
ERROR:      subject:
ERROR:          C=US
ERROR:          ST=California
ERROR:          L=Sunnyvale
ERROR:          O=Fortinet
ERROR:          OU=FortiGate
ERROR:          CN=FGT80ETK20016241
ERROR:          [email protected]
ERROR:      issuer:
ERROR:          C=US
ERROR:          ST=California
ERROR:          L=Sunnyvale
ERROR:          O=Fortinet
ERROR:          OU=Certificate Authority
ERROR:          CN=support
ERROR:          [email protected]
ERROR:      sha256 digest:
ERROR:          faa3576e871f015a55d71910ba63cf9818e24fc92727d80e0665e4c759533eb7
INFO:   Could not log out.
<<<
Method 1: config
bash
# configํŒŒ์ผ ์ˆ˜์ •
vi /opt/homebrew/etc/openfortivpn/openfortivpn/config

---
### configuration file for openfortivpn, see man openfortivpn(1) ###

host = {{ ์›๊ฒฉ ๊ฒŒ์ดํŠธ์›จ์ด }}
port = {{ ํฌํŠธ }}
username = {{ ์•„์ด๋”” }}
password = {{ ๋น„๋ฐ€๋ฒˆํ˜ธ }}
# ์—๋Ÿฌ๋กœ๊ทธ ๋‚ด์˜ ์ธ์ฆ์„œ
trusted-cert = {{ ์ธ์ฆ์„œ }}
bash
# ์‹คํ–‰
sudo openfortivpn

sshpass -pbackup12#$ ssh [email protected]
Method 2: flags
bash
sudo openfortivpn {{ ์›๊ฒฉ ๊ฒŒ์ดํŠธ์›จ์ด }}:{{ ํฌํŠธ }} \
 --username={{ ์•„์ด๋”” }} \
 --password={{ ๋น„๋ฐ€๋ฒˆํ˜ธ }} \
 --trusted-cert {{ ์ธ์ฆ์„œ }}

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *