# Certman
Certman is a simple certificate manager web service for OpenVPN.

**For usage tips, please consult [`usage.md`](usage.md)

## Installation
### Binary
There are prebuilt binary files for this application. They are statically
linked and have no additional dependencies. Supported plattforms are:
 * Windows (XP and up)
 * Linux (2.6.16 and up)
 * Linux ARM (for raspberry pi, 3.0 and up)
Simply download them from the "artifacts" section of this project.
### Docker
A prebuilt docker image (10MB) is available:
```bash
docker pull docker.klink.asia/paul/certman
```
### From Source-Docker
You can easily build your own docker image from source
```bash
docker build -t docker.klink.asia/paul/certman .
```

## Configuration
Certman assumes the root certificates of the VPN CA are located in the same
directory as the binary, If that is not the case you need to copy over the
`ca.crt` and `ca.key` files before you are able to generate certificates
with this tool.

Additionally, the project is configured by the following environment
variables:
 * `OAUTH2_CLIENT_ID` the Client ID, assigned during client registration
 * `OAUTH2_CLIENT_SECRET` the Client secret, assigned during client registration
 * `OAUTH2_AUTH_URL` the URL to the "/authorize" endpoint of the identity provider
 * `OAUTH2_TOKEN_URL` the URL to the "/token" endpoint of the identity provider
 * `OAUTH2_REDIRECT_URL` the redirect URL used by the app, usually the hostname suffixed by "/login/oauth2/redirect"
 * `USER_ENDPOINT` the URL to the Identity provider user endpoint, for gitlab this is "/api/v4/user". The "username" attribute of the returned JSON will used for authentication.
 * `APP_KEY` random ASCII string, 32 characters in length. Used for cookie generation.
 * `APP_LISTEN` port and ip to listen on, e.g. `:8000` or `127.0.0.1:3000`