Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I have recently trying to get into Ubuntu and I've made myself a first project of making a VNP network, where I can access several ec2 (amazon aws) instances.

I have followed several guides, but they all require me to have the key.ca.crt and key.crt, I wish to make this VNP open without files, only with username and password. I understand it's not as secure.

I also want my machine to allow users to access other ec2 instances I made (such as s1 is the VNP, s2 is work and s3 is family).

share|improve this question
    
A concrete question is missing. I am also not sure what this has to do with ubuntu. –  mondjunge Jul 25 '13 at 8:31
    
Hint: Be aware, that even if key/cert authentication looks very complicated in the beginning, it isn't. You should not try to configure a more complex, less secure and less userfriendly solution, just because you imagine it is easier and save enough. –  mondjunge Jul 25 '13 at 8:36
    
Why would you want to use a password? Typing it in every time after a server is rebooted isn't what you want, right? Perhaps you can have a look at Tinc (package tinc). It works with less complicated RSA keypairs rather than full X.509 certificate chains. –  gertvdijk Jul 25 '13 at 8:59
    
mondjunge: I understand it is not complicated for most people to use this. i still need this type of service and that it could be accessible from anywhere with only a kind of pathway, username and password, I will also make sure the user has limited permissions. –  nimmy Jul 26 '13 at 7:40
    
This is an off-topic question and should be migrated to Server Fault since: 1) It's not Ubuntu exclusive question 2. Asker is trying to setup a general VNP configuration 3. It may be that EC2 servers run Ubuntu, but even so, the question is too canonical to being responded just into the scope of Ubuntu ecosystem. –  Braiam Jul 31 '13 at 4:14
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.