mirror of
https://github.com/gregtwallace/apc-p15-tool.git
synced 2025-01-22 16:14:09 +00:00
add compatibility notice in readme
This commit is contained in:
parent
53a3bc5bd7
commit
8a4defcb46
1 changed files with 37 additions and 0 deletions
37
README.md
37
README.md
|
@ -3,6 +3,43 @@ A tool to create APC p15 formatted certificates from pem files, without
|
||||||
having to use APC's closed-source tool, APC generated keys, or other
|
having to use APC's closed-source tool, APC generated keys, or other
|
||||||
proprietary tools (such as cryptlib).
|
proprietary tools (such as cryptlib).
|
||||||
|
|
||||||
|
## Compatibility Notice
|
||||||
|
|
||||||
|
This tool's create functionality is modeled from the APC NMCSecurityWizardCLI
|
||||||
|
aka `NMC Security Wizard CLI Utility`. The files it generates should be
|
||||||
|
comaptible with any UPS that accepts p15 files from that tool, though
|
||||||
|
currently my tool only supports RSA 2,048 bit keys. This was done since
|
||||||
|
1,024 is generally not considered secure any more and most (all?) public
|
||||||
|
ACME services won't accept keys of this size.
|
||||||
|
|
||||||
|
The install functionality is a custom creation of mine so it may or may not
|
||||||
|
work depending on your exact setup. My setup (and therefore the testing
|
||||||
|
setup) is:
|
||||||
|
- APC Smart-UPS 1500VA RM 2U SUA1500RM2U (Firmware Revision 667.18.D)
|
||||||
|
- AP9631 NMC2 Hardware Revision 05 running AOS v7.0.4 and Boot Monitor
|
||||||
|
v1.0.9.
|
||||||
|
|
||||||
|
If you have problems you can post the log in an issue and I can try to fix it
|
||||||
|
but it may be difficult without your particular hardware to test with.
|
||||||
|
|
||||||
|
In particular, if you are experiencing `ssh: handshake failed:` please run
|
||||||
|
`ssh -vv myups.example.com` and include the `peer server KEXINIT proposal`
|
||||||
|
in your issue. For example:
|
||||||
|
|
||||||
|
```
|
||||||
|
debug2: peer server KEXINIT proposal
|
||||||
|
debug2: KEX algorithms: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,ecdh-sha2-nistp256
|
||||||
|
debug2: host key algorithms: ssh-rsa
|
||||||
|
debug2: ciphers ctos: aes256-ctr,aes128-ctr,aes256-cbc,aes128-cbc
|
||||||
|
debug2: ciphers stoc: aes256-ctr,aes128-ctr,aes256-cbc,aes128-cbc
|
||||||
|
debug2: MACs ctos: hmac-sha2-256,hmac-sha1
|
||||||
|
debug2: MACs stoc: hmac-sha2-256,hmac-sha1
|
||||||
|
debug2: compression ctos: none
|
||||||
|
debug2: compression stoc: none
|
||||||
|
debug2: languages ctos:
|
||||||
|
debug2: languages stoc:
|
||||||
|
```
|
||||||
|
|
||||||
## Usage
|
## Usage
|
||||||
|
|
||||||
Currently the tool contains two commands: create and install. The tool
|
Currently the tool contains two commands: create and install. The tool
|
||||||
|
|
Loading…
Reference in a new issue