Reviewing/editing VPN information

[Eric Christensen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I'm reviewing the VPN section of the Fedora Security Guide and I really...  dislike
what I'm seeing.  The information in there is old and seems to focus on IPSec where we
also now support things like OpenVPN, openconnect, vpnc, and PPTP.  I'd really
appreciate some help with this.  If anyone would like to write, edit, or review what's
there please let me know.

Thanks!

- -- Eric

- --------------------------------------------------
Eric "Sparks" Christensen
Fedora Project

sparks(a)fedoraproject.org - sparks(a)redhat.com
097C 82C3 52DF C64A 50C2  E3A3 8076 ABDE 024B B3D1
- --------------------------------------------------
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
>
> iQGcBAEBCgAGBQJTmLC1AAoJEB/kgVGp2CYvoxcL/3U8eNrX8xoqif6rYlagk2ee
> yUGphiTY/WkDV3Ade8fpgDDjBmjXXgj2gbO9JguPK/CSAuJZO3jNhIl2Z35l/Suz
> IKkqyeVIPLduKJKs7TNalUTkmKSPg5JHT5tyBhg04dLpvvwRFbRgm1WiSA7GpDYu
> 1ewuDjhCSFazF+d2vyZSznrmv0YOjM4+raDnT3OKkQmrWtoqv7tfoWKF8sX7O8xa
> wUz5RU3UXwoSwxX0XUJyrCUHqU6mFVryZjni70gQT2TA65t4ghaEwlEAIrffUHbN
> EX1g875WNzJUQ2NqP0ugPED3tKnWUjXf0G74Qyybk5dl6LaSH3O62WICwUyEakCX
> sOmPZ0Z8u5rTTYRmsjOvB+XLmVc1t59mBMYzFkkHNU9cs1E69oyLNUdlwm9XyG7e
> 5ehRO7vBAOSqT3dX85oRKci2gAq92GnsrwDG+VVoKVSngTO740CuTh669NsDbU39
> 0YR0VBT9UkLQcJs7AHzsL0HgnpXbeu5P/dKuFF8gng==
> =JiKL
> -----END PGP SIGNATURE-----

[Nikos Mavrogiannopoulos]

On Wed, 2014-06-11 at 15:40 -0400, Eric H. Christensen wrote:
>  I'm reviewing the VPN section of the Fedora Security Guide and I
> really...  dislike what I'm seeing.  The information in there is old and seems to
> focus on IPSec where we also now support things like OpenVPN, openconnect, vpnc, and PPTP.
>  I'd really appreciate some help with this.  If anyone would like to write, edit, or
> review what's there please let me know. 
Hello,
 I can certainly provide some text for openconnect. Do you have some
layout in mind that VPNs would be discussed? If you have the layout
committed it would be simpler to add the text on each variant. Could you
point to the repository for this guide?

regards,
Nikos

[Eric Christensen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Thu, Jun 12, 2014 at 09:01:46AM +0200, Nikos Mavrogiannopoulos wrote:
>  On Wed, 2014-06-11 at 15:40 -0400, Eric H. Christensen wrote:
>  > I'm reviewing the VPN section of the Fedora Security Guide and I really... 
> dislike what I'm seeing.  The information in there is old and seems to focus on IPSec
> where we also now support things like OpenVPN, openconnect, vpnc, and PPTP.  I'd
> really appreciate some help with this.  If anyone would like to write, edit, or review
> what's there please let me know.
>  
>  Hello,
>   I can certainly provide some text for openconnect. Do you have some
>  layout in mind that VPNs would be discussed? If you have the layout
>  committed it would be simpler to add the text on each variant. Could you
>  point to the repository for this guide? 
Everything is in a FedoraHosted git[0] repo.  Take a look at the master branch,
specifically the file en-US/VPN.xml.  It currently contains a lot of information regarding
IPSec but it's all old and should probably be removed.  It's also missing any
mention of OpenVPN or any other VPN solution.

[0] git+ssh://<fasid>@git.fedorahosted.org/git/docs/securityguide.git

- -- Eric

- --------------------------------------------------
Eric "Sparks" Christensen
Red Hat, Inc - Product Security Team

sparks(a)redhat.com - sparks(a)fedoraproject.org
097C 82C3 52DF C64A 50C2  E3A3 8076 ABDE 024B B3D1
- --------------------------------------------------
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
>
> iQGcBAEBCgAGBQJTmctKAAoJEB/kgVGp2CYvaugMAIF5FzgRmOZB7+Vo/awarRwz
> aqXLiOmZk1f/Qzt3Qrye3+JQC7Vw+pA7AVN27uWdJSibUeRq5Yaq1l3Q364prNs1
> TKhCn2iZhSMgG1pM54WIi9ySqcRbO2heI7NzXa15rP1O7IWwOcBWX0KNcPIIMJfU
> qt0f6qBmST0S4q6hSq6th3IgU3kdGFSuIDWXS+mgWaFYzBpltzUPBG/Xg8leBPDK
> u0Oh+N5UycTJDqaXAL9/W2LFw0t3Mdi1+EBXB3QjS7LqVcsHJC6LXbtihEjOklpE
> uiywxv0sw2eJV2lOxXUaHMMjRT9rq3fEWF4xsIRMBIEPjGEFYBnQ5ASPsDW6MPXF
> AJa84ADgUT0UGDGOixuL98ws/6SoDTdYU5ttK1brSWRcW8Rkf/oWllPjsRhq2GHi
> r62iRQJ0QSfJMbML8W6vvpUDWCfH8CbuNllcmnn5qucqIdwVuMrumJdz5QtfWZQ0
> dzEGhTn5W/CbJXDe+l0lJLClTtzVnq8fEF+jSP1JNQ==
> =/B3N
> -----END PGP SIGNATURE-----

[Nikos Mavrogiannopoulos]

On Wed, 2014-06-11 at 15:40 -0400, Eric H. Christensen wrote:
>  I'm reviewing the VPN section of the Fedora Security Guide and I
> really...  dislike what I'm seeing.  The information in there is old and seems to
> focus on IPSec where we also now support things like OpenVPN, openconnect, vpnc, and PPTP.
>  I'd really appreciate some help with this.  If anyone would like to write, edit, or
> review what's there please let me know. 
These two patches clean-up a bit the introduction and add a section of
openconnect.

regards,
Nikos

[Eric Christensen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Mon, Jun 16, 2014 at 03:56:41PM +0200, Nikos Mavrogiannopoulos wrote:
>  On Wed, 2014-06-11 at 15:40 -0400, Eric H. Christensen wrote:
>  > I'm reviewing the VPN section of the Fedora Security Guide and I really... 
> dislike what I'm seeing.  The information in there is old and seems to focus on IPSec
> where we also now support things like OpenVPN, openconnect, vpnc, and PPTP.  I'd
> really appreciate some help with this.  If anyone would like to write, edit, or review
> what's there please let me know.
>  
>  These two patches clean-up a bit the introduction and add a section of
>  openconnect. 
Thank you!

commit cb81ac7d069e080d57df40433544bb7308073496
Author: Nikos Mavrogiannopoulos <nmav(a)redhat.com&gt;
Date:   Mon Jun 16 15:52:46 2014 +0200

    VPN: Added OpenConnect section.
    
    Signed-off-by: Eric H Christensen <sparks(a)redhat.com&gt;

commit 8f6a8c7ffb1257ceea6897a937833a1da484b706
Author: Nikos Mavrogiannopoulos <nmav(a)redhat.com&gt;
Date:   Mon Jun 16 15:00:35 2014 +0200

    VPN: Mention other VPN types and move all IPSec info to IPSec section.
    
    Signed-off-by: Eric H Christensen <sparks(a)redhat.com&gt;

- --Eric

- --------------------------------------------------
Eric "Sparks" Christensen
Red Hat, Inc - Product Security

sparks(a)redhat.com - sparks(a)fedoraproject.org
097C 82C3 52DF C64A 50C2  E3A3 8076 ABDE 024B B3D1
- --------------------------------------------------
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
>
> iQGcBAEBCgAGBQJTn0hTAAoJEB/kgVGp2CYv87sMAITTHik8n4RUxF/Wwd/LMpRR
> zad57ZHZGiM6yAN59bQFdaGq+h7m0Cl9pjc0gsswOX8wE1MBmHNhyZ1Xsb+nJ0iP
> OMJLqSgHSwr8zctMh9wlGgcGLbQiL0IEw+iZ+apEC+aFARfMhGvcRobGtfyaAxWc
> RmvsKQ21MrWK0Pb6j9zw/0zICfdVi8CccGIrQVrrSc0M/ZI+L7VJyPkL4CM3oGy/
> iWM53B3Ot7bSxpd7xtluUacwFL4tpow3OyDHm7Q/hqHqlv5nWuBDjEH5657KySyd
> D4aWkGTuyyvbMc9iG1ELMYVW/Oq3MhKYw/IUQq47BVzy62Ye4kyqy6TvTRjkLvA/
> CPhGMFF0mLnO0mFq/PVTR0qMfIpWyk1GyXMOYmgco/4OPkrsjjFGiljMtb+YDQUJ
> Xw7/0wojKiPf1gE0Qw2YUwykoT6rTrNPbdEcatP7sRa+R9nBUjD8dLb2ymaIu1jy
> VZWMhSmQ7upG6P1ZUBEoyZMxGGGWZzs7+Pw2XuzDyw==
> =RRzJ
> -----END PGP SIGNATURE-----