added diagrams describing the process of obtaining information about clients

This commit is contained in:
vladimir.kuznetsov 2023-01-18 19:55:12 +03:00
parent d6d3bf6943
commit c5df7f9bb7
5 changed files with 125 additions and 15 deletions

View file

@ -0,0 +1,35 @@
@startuml openVpnRevokeClientCertificate
actor Admin as adm
participant "Amnezia Client" as cli
participant "Amnezia Container" as cont
participant "OpenVpn Service" as ovpn
adm -> cli: revoke the selected client certificate
cli -> cli: start busy indicator
cli -> cont: execute script "revoke openvpn client"
cont -> cont: cd /opt/amnezia/openvpn
cont -> cont: easyrsa revoke openvpnCertId
cont -> cont: easyrsa gen-crl
cont -> cont: cp pki/crl.pem crl.pem
cont -> cont: add crl-verify crl.pem to server.conf
cont -> ovpn: restart openvpn service
note right
In the OpenVpn config
there should be a line "crl-verify crl.pem".
After that, the service will ignore
the certificates contained in the crl.pem file
end note
group#lightgreen #lightgreen if [successful case]
ovpn --> cont: restart result
cont --> cli: back to the client management page
else #pink some kind of failure
cont --> cli: display an error depending on when it occurred
end
cli -> cli: stop busy indicator
cli --> adm: return control to the user
@enduml