|
@@ -479,7 +479,7 @@ Set the following properties:
|
479
|
479
|
TCP_PORTS="1,7,9,11,15,79,109,110,111,119,138,139,512,513,514,515,540,635,1080,1524,2000,2001,4000,4001,5742,6000,6001,6667,12345,12346,20034,27665,30303,32771,32772,32773,32774,31337,40421,40425,49724,54320"
|
480
|
480
|
UDP_PORTS="1,7,9,66,67,68,69,111,137,138,161,162,474,513,517,518,635,640,641,666,700,2049,31335,27444,34555,32770,32771,32772,32773,32774,31337,54321"
|
481
|
481
|
|
482
|
|
-ADVANCED_EXCLUDE_TCP="113,139,70,80,443,143,6670,993,5060,5061,25,465,22,5222,5223,5269,5280,5281,8444"
|
|
482
|
+ADVANCED_EXCLUDE_TCP="113,139,70,80,443,143,6670,993,5060,5061,25,465,22,5222,5223,5269,5280,5281,8432,8433,8444"
|
483
|
483
|
ADVANCED_EXCLUDE_UDP="520,138,137,67,70,80,443,143,6670,993, 5060,5061,25,465,22,5222,5223,5269,5280,5281,8444"
|
484
|
484
|
|
485
|
485
|
SCAN_TRIGGER="2"
|
|
@@ -4982,28 +4982,15 @@ Convergence is a secure replacement for the Certificate Authority System. Rather
|
4982
|
4982
|
#+BEGIN_SRC: bash
|
4983
|
4983
|
apt-get install python python-twisted-web python-twisted-names python-m2crypto python-openssl
|
4984
|
4984
|
cd /tmp
|
4985
|
|
-wget http://freedombone.uk.to/convergence-notary-current.tar.gz
|
4986
|
|
-#+END_SRC
|
4987
|
|
-
|
4988
|
|
-Verify it:
|
4989
|
|
-
|
4990
|
|
-#+BEGIN_SRC: bash
|
4991
|
|
-sha256sum convergence-notary-current.tar.gz
|
4992
|
|
-6d3f7f30649c174c58ef4d719498d33737ddfa229f3d7fc51af0162b590d719b
|
4993
|
|
-#+END_SRC
|
4994
|
|
-
|
4995
|
|
-Install it:
|
4996
|
|
-
|
4997
|
|
-#+BEGIN_SRC: bash
|
4998
|
|
-tar zxvf convergence-notary-current.tar.gz
|
4999
|
|
-cd convergence-0.4
|
|
4985
|
+git clone https://github.com/fuzzgun/convergence
|
|
4986
|
+cd convergence/server
|
5000
|
4987
|
python ./setup.py install
|
5001
|
4988
|
#+END_SRC
|
5002
|
4989
|
|
5003
|
4990
|
Generate a key pair:
|
5004
|
4991
|
|
5005
|
4992
|
#+BEGIN_SRC: bash
|
5006
|
|
-convergence-gencert
|
|
4993
|
+convergence gencert
|
5007
|
4994
|
#+END_SRC
|
5008
|
4995
|
|
5009
|
4996
|
When asked for a challenge password just hit *Enter* a couple of times. Then move the key pair to the appropriate directories as follows.
|
|
@@ -5017,21 +5004,40 @@ mv mynotary.pem /etc/ssl/certs
|
5017
|
5004
|
Now create the database:
|
5018
|
5005
|
|
5019
|
5006
|
#+BEGIN_SRC: bash
|
5020
|
|
-convergence-createdb
|
|
5007
|
+rm /var/lib/convergence/convergence.db
|
|
5008
|
+convergence createdb
|
5021
|
5009
|
#+END_SRC
|
5022
|
5010
|
|
5023
|
5011
|
Create an initialisation script:
|
5024
|
5012
|
|
5025
|
5013
|
#+BEGIN_SRC: bash
|
5026
|
|
-convergence-notary -p 8432 -s 8433 -c /etc/ssl/certs/mynotary.pem -k /etc/ssl/private/mynotary.key
|
|
5014
|
+emacs /etc/init.d/convergence
|
5027
|
5015
|
#+END_SRC
|
5028
|
5016
|
|
5029
|
|
-An initialisation script will be created automatically within /etc/init.d.
|
|
5017
|
+Add the following:
|
|
5018
|
+
|
|
5019
|
+#+BEGIN_SRC: bash
|
|
5020
|
+#+END_SRC
|
|
5021
|
+
|
|
5022
|
+Save and exit.
|
|
5023
|
+
|
|
5024
|
+#+BEGIN_SRC: bash
|
|
5025
|
+adduser converg
|
|
5026
|
+#+END_SRC
|
|
5027
|
+
|
|
5028
|
+The details for the user don't especially matter, but give them a long random password.
|
|
5029
|
+
|
|
5030
|
+#+BEGIN_SRC: bash
|
|
5031
|
+chown -R converg:converg /home/converg
|
|
5032
|
+chmod +x /etc/init.d/convergence
|
|
5033
|
+update-rc.d convergence defaults
|
|
5034
|
+service convergence start
|
|
5035
|
+#+END_SRC
|
5030
|
5036
|
|
5031
|
5037
|
Generate a notary bundle:
|
5032
|
5038
|
|
5033
|
5039
|
#+BEGIN_SRC: bash
|
5034
|
|
-convergence-bundle
|
|
5040
|
+convergence bundle
|
5035
|
5041
|
#+END_SRC
|
5036
|
5042
|
|
5037
|
5043
|
Enter your name, nickname, handle or whatever.
|
|
@@ -5055,7 +5061,7 @@ Now open ports 8432 and 8433 on your internet router or firewall and direct it t
|
5055
|
5061
|
*** Using Convergence
|
5056
|
5062
|
On a computer which is not the BBB (your laptop, etc):
|
5057
|
5063
|
|
5058
|
|
-Install the browser plugin by navigating to https://convergence.io or a backup copy also exists at http://freedombone.uk.to/convergence-current.xpi
|
|
5064
|
+Install the browser plugin by navigating to https://addons.mozilla.org/en-us/firefox/addon/convergence-extra/
|
5059
|
5065
|
|
5060
|
5066
|
After installation restart your browser.
|
5061
|
5067
|
|