mirror of
https://github.com/SoftEtherVPN/SoftEtherVPN.git
synced 2025-07-06 15:54:57 +03:00
Implement complete server certificate verification
This commit is contained in:
Yihong Wu
@ -214,6 +214,7 @@ ERR_145 不可接受的操作。使用 VPN Gate 实用工具修改 VPN Gate
|
||||
ERR_146 VPN Gate 服务运行在 VPN 客户端程序内。在此屏幕上，你不能停止 VPN Gate 服务。使用 VPN 客户端管理器来启用或禁用 VPN Gate 服务。
|
||||
ERR_147 不支持此功能。它尚未在 SoftEther VPN 的开源版本上实施。
|
||||
ERR_148 VPN 连接被中断，因为该系统被暂停。
|
||||
ERR_149 目标 VPN Server 的证书与指定的主机名不匹配。
|
||||
|
||||
|
||||
#关于许可证
|
||||
@ -2340,6 +2341,7 @@ R_SOCKS5 通过 SOCKS5 代理服务器连接(&S)
|
||||
B_PROXY_CONFIG 代理服务器设置(&R)
|
||||
STATIC11 服务端证书验证选项(&F):
|
||||
R_CHECK_CERT 总是验证服务端证书(&C)
|
||||
R_TRUST_DEFAULT 信任系统证书存储
|
||||
B_TRUST 管理可信发证机关证书列表(&C)
|
||||
B_SERVER_CERT 指定特定证书(&S)
|
||||
B_VIEW_SERVER_CERT 查看特定证书(&V)
|
||||
@ -4410,7 +4412,8 @@ CMD_ACCOUNT_COLUMN_PROXY_PORT 代理服务器的端口号
|
||||
CMD_ACCOUNT_COLUMN_PROXY_USERNAME 代理服务器的用户名
|
||||
CMD_ACCOUNT_COLUMN_SERVER_CERT_USE 验证服务器证书
|
||||
CMD_ACCOUNT_COLUMN_SERVER_CERT_NAME 注册的服务器个人证书
|
||||
CMD_ACCOUNT_COLUMN_RETRY_ON_SERVER_CERT Retry on Untrusted Server Certificate
|
||||
CMD_ACCOUNT_COLUMN_RETRY_ON_SERVER_CERT 遇到不信任的证书时重试
|
||||
CMD_ACCOUNT_COLUMN_ADD_DEFAULT_CA 信任系统证书存储
|
||||
CMD_ACCOUNT_COLUMN_DEVICE_NAME 用于连接的设备名
|
||||
CMD_ACCOUNT_COLUMN_AUTH_TYPE 验证类型
|
||||
CMD_ACCOUNT_COLUMN_AUTH_USERNAME 用户名
|
||||
@ -4425,7 +4428,7 @@ CMD_ACCOUNT_COLUMN_BRIDGE_ROUTER 通过网桥 / 路由模式连接
|
||||
CMD_ACCOUNT_COLUMN_MONITOR 通过监测模式连接
|
||||
CMD_ACCOUNT_COLUMN_NO_TRACKING 不要调整路由表
|
||||
CMD_ACCOUNT_COLUMN_QOS_DISABLE 不要使用 QoS 控制功能
|
||||
CMD_ACCOUNT_COLUMN_DISABLEUDP Disable UDP Acceleration
|
||||
CMD_ACCOUNT_COLUMN_DISABLEUDP 禁用 UDP 加速功能
|
||||
|
||||
|
||||
# Debugging Information Collecting Tool
|
||||
@ -5513,6 +5516,20 @@ CMD_CascadeServerCertDisable_Args CascadeServerCertDisable [name]
|
||||
CMD_CascadeServerCertDisable_[name] 指定级联名称来改变设置。
|
||||
|
||||
|
||||
# CascadeDefaultCAEnable 命令
|
||||
CMD_CascadeDefaultCAEnable 启用信任系统证书存储选项
|
||||
CMD_CascadeDefaultCAEnable_Help 当启用服务器证书验证时，使用此选项来启用信任系统证书存储的证书。\n如果禁用服务器证书验证，则此选项不执行任何操作。
|
||||
CMD_CascadeDefaultCAEnable_Args CascadeDefaultCAEnable [name]
|
||||
CMD_CascadeDefaultCAEnable_[name] 指定级联名称来改变设置。
|
||||
|
||||
|
||||
# CascadeDefaultCADisable 命令
|
||||
CMD_CascadeDefaultCADisable 禁用信任系统证书存储选项
|
||||
CMD_CascadeDefaultCADisable_Help 当启用服务器证书验证时，使用此选项来禁用信任系统证书存储的证书。\n如果禁用服务器证书验证，则此选项不执行任何操作。
|
||||
CMD_CascadeDefaultCADisable_Args CascadeDefaultCADisable [name]
|
||||
CMD_CascadeDefaultCADisable_[name] 指定级联名称来改变设置。
|
||||
|
||||
|
||||
# CascadeServerCertSet 命令
|
||||
CMD_CascadeServerCertSet 设置级联连接的服务器特定证书
|
||||
CMD_CascadeServerCertSet_Help 指定已经在当前虚拟 HUB 注册的级联连接，当此连接和 VPN Server 之间通信时，事先将连接方提供的 SSL 证书注册。\n如果启用此选项，需要将在目标服务器的证书事先通过指令设置到级联的连接设置中，或者在虚拟 HUB 的可信任证书列表中，运行 CAAdd 指令，将有服务器的 SSL 证书署名的路线证书添加进去。\n当启用服务器证书验证选项时，如果 VPN Server 提供的证书不可信，连接将断开，并重试。\n此命令在集群虚拟 HUB 中不能运行。
|
||||
@ -6817,6 +6834,20 @@ CMD_AccountRetryOnServerCertDisable_Args AccountRetryOnServerCertDisable [name]
|
||||
CMD_AccountRetryOnServerCertDisable_[name] Specify the name of the VPN Connection Setting whose setting you want to change.
|
||||
|
||||
|
||||
# AccountDefaultCAEnable 命令
|
||||
CMD_AccountDefaultCAEnable 启用信任系统证书存储选项
|
||||
CMD_AccountDefaultCAEnable_Help 当启用服务器证书验证时，使用此选项来启用信任系统证书存储的证书。\n如果禁用服务器证书验证，则此选项不执行任何操作。
|
||||
CMD_AccountDefaultCAEnable_Args AccountDefaultCAEnable [name]
|
||||
CMD_AccountDefaultCAEnable_[name] 指定要更改设置的连接设置名。
|
||||
|
||||
|
||||
# AccountDefaultCADisable 命令
|
||||
CMD_AccountDefaultCADisable 禁用信任系统证书存储选项
|
||||
CMD_AccountDefaultCADisable_Help 当启用服务器证书验证时，使用此选项来禁用信任系统证书存储的证书。\n如果禁用服务器证书验证，则此选项不执行任何操作。
|
||||
CMD_AccountDefaultCADisable_Args AccountDefaultCADisable [name]
|
||||
CMD_AccountDefaultCADisable_[name] 指定要更改设置的连接设置名。
|
||||
|
||||
|
||||
# AccountServerCertSet 命令
|
||||
CMD_AccountServerCertSet 设置连接设置的服务器固有证明书
|
||||
CMD_AccountServerCertSet_Help 指定注册到 VPN Client 的连接设置，其连接设置连接到 VPN Server 时，预先注册与连接目标的 VPN Server 提交的 SSL 证书相同的证书。\n如果启动了连接设置的服务器证书验证选项，可以预先将连接目标服务器的 SSL 证书以此指令保存在连接设置的设置内，或需要将服务器的 SSL 证书签名了的根证书，以 CAAdd 指令注册到虚拟 HUB 信任的证明机构的证书列表中。\n验证连接设置的服务器证书的选项处于启动状态，连接了的 VPN Server 的证书不可信时，立即解除连接，反复重试。
|
||||
|
||||
@ -212,6 +212,8 @@ ERR_145 Unacceptable operation. Use the VPN Gate Utility to modify the conne
|
||||
ERR_146 The VPN Gate Service is running inside the VPN Client program. You cannot stop the VPN Gate Service on this screen. Use the VPN Client Manager to enable or disable the VPN Gate Service.
|
||||
ERR_147 This feature is not supported. It hasn't been implemented yet on the open-source version of SoftEther VPN.
|
||||
ERR_148 The VPN connection was disconnected because the system is being suspended.
|
||||
ERR_149 The destination VPN Server's certificate does not match the specified hostname.
|
||||
|
||||
|
||||
# Concerning licenses
|
||||
LICENSE_INFO_URL https://selinks.org/?new_license
|
||||
@ -2322,6 +2324,7 @@ R_SOCKS5 Connect via &SOCKS5 Proxy Server
|
||||
B_PROXY_CONFIG P&roxy Server Setting
|
||||
STATIC11 Server Certificate Veri&fication Option:
|
||||
R_CHECK_CERT Always Verify Server &Certificate
|
||||
R_TRUST_DEFAULT Trust System Certificate Store
|
||||
B_TRUST Manage Trusted CA &Certificate List
|
||||
B_SERVER_CERT &Specify Individual Cert
|
||||
B_VIEW_SERVER_CERT Show Indi&vidual Cert
|
||||
@ -4396,6 +4399,7 @@ CMD_ACCOUNT_COLUMN_PROXY_USERNAME Proxy Server User Name
|
||||
CMD_ACCOUNT_COLUMN_SERVER_CERT_USE Verify Server Certificate
|
||||
CMD_ACCOUNT_COLUMN_SERVER_CERT_NAME Registered Server Individual Certificate
|
||||
CMD_ACCOUNT_COLUMN_RETRY_ON_SERVER_CERT Retry on Untrusted Server Certificate
|
||||
CMD_ACCOUNT_COLUMN_ADD_DEFAULT_CA Trust System Certificate Store
|
||||
CMD_ACCOUNT_COLUMN_DEVICE_NAME Device Name Used for Connection
|
||||
CMD_ACCOUNT_COLUMN_AUTH_TYPE Authentication Type
|
||||
CMD_ACCOUNT_COLUMN_AUTH_USERNAME User Name
|
||||
@ -5496,6 +5500,20 @@ CMD_CascadeServerCertDisable_Args CascadeServerCertDisable [name]
|
||||
CMD_CascadeServerCertDisable_[name] Specify the name of the Cascade Connection whose setting you want to change.
|
||||
|
||||
|
||||
# CascadeDefaultCAEnable command
|
||||
CMD_CascadeDefaultCAEnable Enable Trust System Certificate Store Option
|
||||
CMD_CascadeDefaultCAEnable_Help When server certificate verification is enabled, use this to enable trusting certificates from the system trust store. \nIf server certificate verification is disabled, this option does nothing.
|
||||
CMD_CascadeDefaultCAEnable_Args CascadeDefaultCAEnable [name]
|
||||
CMD_CascadeDefaultCAEnable_[name] Specify the name of the Cascade Connection whose setting you want to change.
|
||||
|
||||
|
||||
# CascadeDefaultCADisable command
|
||||
CMD_CascadeDefaultCADisable Disable Trust System Certificate Store Option
|
||||
CMD_CascadeDefaultCADisable_Help When server certificate verification is enabled, use this to disable trusting certificates from the system trust store. \nIf server certificate verification is disabled, this option does nothing.
|
||||
CMD_CascadeDefaultCADisable_Args CascadeDefaultCADisable [name]
|
||||
CMD_CascadeDefaultCADisable_[name] Specify the name of the Cascade Connection whose setting you want to change.
|
||||
|
||||
|
||||
# CascadeServerCertSet command
|
||||
CMD_CascadeServerCertSet Set the Server Individual Certificate for Cascade Connection
|
||||
CMD_CascadeServerCertSet_Help When a Cascade Connection registered on the currently managed Virtual Hub is specified and that Cascade Connection connects to a VPN Server, use this to register beforehand the same certificate as the SSL certificate provided by the destination VPN Server. \nIf the option to verify server certificates for Cascade Connections is enabled, you must either use this command to save the connection destination server SSL certificate beforehand in the Cascade Connection Settings beforehand, or use the CAAdd command etc. to register a root certificate containing the signed server SSL certificate in the list of Virtual Hub trusted CA certificates. \nIf the certificate of the connected VPN Server cannot be trusted under the condition where the option to verify server certificates was enabled for the Cascade Connection, the connection will be promptly cancelled and continual reattempts at connection will be made. \nYou cannot execute this command for Virtual Hubs of VPN Servers operating as a cluster.
|
||||
@ -6803,6 +6821,20 @@ CMD_AccountRetryOnServerCertDisable_Args AccountRetryOnServerCertDisable [name]
|
||||
CMD_AccountRetryOnServerCertDisable_[name] Specify the name of the VPN Connection Setting whose setting you want to change.
|
||||
|
||||
|
||||
# AccountDefaultCAEnable command
|
||||
CMD_AccountDefaultCAEnable Enable Trust System Certificate Store Option
|
||||
CMD_AccountDefaultCAEnable_Help When server certificate verification is enabled, use this to enable trusting certificates from the system trust store. \nIf server certificate verification is disabled, this option does nothing.
|
||||
CMD_AccountDefaultCAEnable_Args AccountDefaultCAEnable [name]
|
||||
CMD_AccountDefaultCAEnable_[name] Specify the name of the VPN Connection Setting whose setting you want to change.
|
||||
|
||||
|
||||
# AccountDefaultCADisable command
|
||||
CMD_AccountDefaultCADisable Disable Trust System Certificate Store Option
|
||||
CMD_AccountDefaultCADisable_Help When server certificate verification is enabled, use this to disable trusting certificates from the system trust store. \nIf server certificate verification is disabled, this option does nothing.
|
||||
CMD_AccountDefaultCADisable_Args AccountDefaultCADisable [name]
|
||||
CMD_AccountDefaultCADisable_[name] Specify the name of the VPN Connection Setting whose setting you want to change.
|
||||
|
||||
|
||||
# AccountServerCertSet command
|
||||
CMD_AccountServerCertSet Set Server Individual Certificate for VPN Connection Setting
|
||||
CMD_AccountServerCertSet_Help When a VPN Connection Setting registered on the VPN Client is specified and that VPN Connection Setting connects to a VPN Server, use this to register the same certificate as the SSL certificate provided by the destination VPN Server. \nIf the option to verify server certificates for VPN Connection Settings is enabled, you must either use this command to save the connection destination server SSL certificate beforehand in the VPN Connection Setting settings beforehand, or use the CAAdd command etc. to register a root certificate containing the signed server SSL certificate in the list of Virtual Hub trusted CA certificates. \nIf the certificate of the connected VPN Server cannot be trusted under the condition where the option to verify server certificates has been enabled for the VPN Connection Setting, the connection will be promptly cancelled and continual reattempts at connection will be made.
|
||||
|
||||
@ -214,7 +214,7 @@ ERR_145 この操作は実行できません。VPN Gate 公開 VPN 中継サ
|
||||
ERR_146 VPN Gate サービスが VPN Client 内で動作している場合は、この設定画面から VPN Gate サービスを停止することはできません。VPN Gate サービスを停止するには、VPN Client 接続マネージャの設定ツールを使用してください。
|
||||
ERR_147 この機能はオープンソース版 SoftEther VPN にはまだ実装されていません。
|
||||
ERR_148 Windows システムがサスペンド状態に移行中のため、VPN 通信が切断されました。
|
||||
|
||||
ERR_149 接続先サーバーの提示した証明書が指定したホスト名と一致しません。
|
||||
|
||||
|
||||
# ライセンス関係
|
||||
@ -2328,6 +2328,7 @@ R_SOCKS5 SOCKS5 プロキシサーバー経由接続(&S)
|
||||
B_PROXY_CONFIG プロキシサーバーの接続設定(&2)
|
||||
STATIC11 サーバー証明書の検証オプション(&F):
|
||||
R_CHECK_CERT サーバー証明書を必ず検証する(&3)
|
||||
R_TRUST_DEFAULT システム証明書ストアを信頼する
|
||||
B_TRUST 信頼する証明機関の証明書の管理(&4)
|
||||
B_SERVER_CERT 固有証明書の登録(&R)
|
||||
B_VIEW_SERVER_CERT 固有証明書の表示(&5)
|
||||
@ -4401,6 +4402,7 @@ CMD_ACCOUNT_COLUMN_PROXY_USERNAME プロキシサーバーのユーザー名
|
||||
CMD_ACCOUNT_COLUMN_SERVER_CERT_USE サーバー証明書の検証
|
||||
CMD_ACCOUNT_COLUMN_SERVER_CERT_NAME 登録されているサーバー固有証明書
|
||||
CMD_ACCOUNT_COLUMN_RETRY_ON_SERVER_CERT サーバー証明書が信頼できない場合に接続を再試行する
|
||||
CMD_ACCOUNT_COLUMN_ADD_DEFAULT_CA システム証明書ストアを信頼する
|
||||
CMD_ACCOUNT_COLUMN_DEVICE_NAME 接続に使用するデバイス名
|
||||
CMD_ACCOUNT_COLUMN_AUTH_TYPE 認証の種類
|
||||
CMD_ACCOUNT_COLUMN_AUTH_USERNAME ユーザー名
|
||||
@ -5500,6 +5502,20 @@ CMD_CascadeServerCertDisable_Args CascadeServerCertDisable [name]
|
||||
CMD_CascadeServerCertDisable_[name] 設定を変更するカスケード接続の名前を指定します。
|
||||
|
||||
|
||||
# CascadeDefaultCAEnable コマンド
|
||||
CMD_CascadeDefaultCAEnable システム証明書ストアからの証明書の信頼を有効化
|
||||
CMD_CascadeDefaultCAEnable_Help サーバー証明書の検証が有効になっている場合、システム証明書ストアからの証明書の信頼を有効にします。\nサーバー証明書の検証が無効になっている場合、このオプションは何もしません。
|
||||
CMD_CascadeDefaultCAEnable_Args CascadeDefaultCAEnable [name]
|
||||
CMD_CascadeDefaultCAEnable_[name] 設定を変更するカスケード接続の名前を指定します。
|
||||
|
||||
|
||||
# CascadeDefaultCADisable コマンド
|
||||
CMD_CascadeDefaultCADisable システム証明書ストアからの証明書の信頼を無効化
|
||||
CMD_CascadeDefaultCADisable_Help サーバー証明書の検証が有効になっている場合、システム証明書ストアからの証明書の信頼を無効にします。\nサーバー証明書の検証が無効になっている場合、このオプションは何もしません。
|
||||
CMD_CascadeDefaultCADisable_Args CascadeDefaultCADisable [name]
|
||||
CMD_CascadeDefaultCADisable_[name] 設定を変更するカスケード接続の名前を指定します。
|
||||
|
||||
|
||||
# CascadeServerCertSet コマンド
|
||||
CMD_CascadeServerCertSet カスケード接続のサーバー固有証明書の設定
|
||||
CMD_CascadeServerCertSet_Help 現在管理している仮想 HUB に登録されているカスケード接続を指定し、そのカスケード接続が VPN Server に対して接続する際に、接続先の VPN Server の提示する SSL 証明書と同じ証明書をあらかじめ登録します。\nカスケード接続の、サーバー証明書の検証オプションが有効になっている場合、接続先サーバーの SSL 証明書を、あらかじめこのコマンドでカスケード接続設定内に保存しておくか、または仮想 HUB の信頼する証明機関の証明書一覧に、サーバーの SSL 証明書を署名したルート証明書を CAAdd コマンドなどで登録しておく必要があります。\nカスケード接続の、サーバー証明書の検証オプションが有効になっている状態で接続した VPN Server の証明書が信頼できない場合、直ちに接続を解除して再試行を繰り返します。\nこのコマンドは、クラスタとして動作している VPN Server の仮想 HUB では実行できません。
|
||||
@ -6801,7 +6817,6 @@ CMD_AccountServerCertDisable_[name] 設定を変更する接続設定の名前
|
||||
# AccountRetryOnServerCertEnable コマンド
|
||||
CMD_AccountRetryOnServerCertEnable 接続設定のサーバー証明書が信頼できない場合の接続再試行を有効化
|
||||
CMD_AccountRetryOnServerCertEnable_Help 接続設定のサーバー証明書の検証プションが有効になっている状態で、 VPN Server の証明書が信頼できない場合、直ちに接続を解除して再試行を繰り返します。AccountRetryOnServerCertDisableコマンドを使用することにより再試行を行わないように設定することができますが、このコマンドを使用することにより、デフォルトの接続再試行を行う状態に戻すことができます。
|
||||
|
||||
CMD_AccountRetryOnServerCertEnable_Args AccountRetryOnServerCertEnable [name]
|
||||
CMD_AccountRetryOnServerCertEnable_[name] 設定を変更する接続設定の名前を指定します。
|
||||
|
||||
@ -6813,6 +6828,20 @@ CMD_AccountRetryOnServerCertDisable_Args AccountRetryOnServerCertDisable [name]
|
||||
CMD_AccountRetryOnServerCertDisable_[name] 設定を変更する接続設定の名前を指定します。
|
||||
|
||||
|
||||
# AccountDefaultCAEnable コマンド
|
||||
CMD_AccountDefaultCAEnable システム証明書ストアからの証明書の信頼を有効化
|
||||
CMD_AccountDefaultCAEnable_Help サーバー証明書の検証が有効になっている場合、システム証明書ストアからの証明書の信頼を有効にします。\nサーバー証明書の検証が無効になっている場合、このオプションは何もしません。
|
||||
CMD_AccountDefaultCAEnable_Args AccountDefaultCAEnable [name]
|
||||
CMD_AccountDefaultCAEnable_[name] 設定を変更する接続設定の名前を指定します。
|
||||
|
||||
|
||||
# AccountDefaultCADisable コマンド
|
||||
CMD_AccountDefaultCADisable システム証明書ストアからの証明書の信頼を無効化
|
||||
CMD_AccountDefaultCADisable_Help サーバー証明書の検証が有効になっている場合、システム証明書ストアからの証明書の信頼を無効にします。\nサーバー証明書の検証が無効になっている場合、このオプションは何もしません。
|
||||
CMD_AccountDefaultCADisable_Args AccountDefaultCADisable [name]
|
||||
CMD_AccountDefaultCADisable_[name] 設定を変更する接続設定の名前を指定します。
|
||||
|
||||
|
||||
# AccountServerCertSet コマンド
|
||||
CMD_AccountServerCertSet 接続設定のサーバー固有証明書の設定
|
||||
CMD_AccountServerCertSet_Help VPN Client に登録されている接続設定を指定し、その接続設定が VPN Server に対して接続する際に、接続先の VPN Server の提示する SSL 証明書と同じ証明書をあらかじめ登録します。\n接続設定のサーバー証明書の検証オプションが有効になっている場合、接続先サーバーの SSL 証明書をあらかじめこのコマンドで接続設定設定内に保存しておくか、または仮想 HUB の信頼する証明機関の証明書一覧に、サーバーの SSL 証明書を署名したルート証明書を CAAdd コマンドなどで登録しておく必要があります。\n接続設定のサーバー証明書の検証オプションが有効になっている状態で、接続した VPN Server の証明書が信頼できない場合、直ちに接続を解除して再試行を繰り返します。
|
||||
|
||||
@ -218,7 +218,7 @@ ERR_145 이 작업을 수행 할 수 없습니다. VPN Gate 공개 VPN 중계
|
||||
ERR_146 VPN Gate 서비스가 VPN Client에서 실행중인 경우이 설정 화면에서 VPN Gate 서비스를 중지 할 수 없습니다. VPN Gate 서비스를 중지하려면 VPN Client 연결 관리자 설정 도구를 사용하십시오.
|
||||
ERR_147 이 기능은 오픈 소스 버전 SoftEther VPN은 아직 구현되어 있지 않습니다.
|
||||
ERR_148 Windows 시스템이 대기 상태로 전환 중이기 때문에 VPN 통신이 끊어졌습니다.
|
||||
|
||||
ERR_149 대상 VPN 서버의 인증서가 지정된 호스트 이름과 일치하지 않습니다.
|
||||
|
||||
|
||||
# 라이센스 관계
|
||||
@ -2306,6 +2306,7 @@ R_SOCKS5 SOCKS5 프록시 서버를 통해 연결 (&S)
|
||||
B_PROXY_CONFIG 프록시 서버 연결 설정 (&2)
|
||||
STATIC11 서버 인증서 검증 옵션 (&F):
|
||||
R_CHECK_CERT 서버 인증서를 반드시 확인한다 (&3)
|
||||
R_TRUST_DEFAULT 시스템 인증서 저장소 신뢰
|
||||
B_TRUST 신뢰하는 인증 기관의 인증서 관리 (&4)
|
||||
B_SERVER_CERT 고유 인증서 등록 (&R)
|
||||
B_VIEW_SERVER_CERT 고유 인증서보기 (&5)
|
||||
@ -4379,6 +4380,7 @@ CMD_ACCOUNT_COLUMN_PROXY_USERNAME 프록시 서버의 사용자 이름
|
||||
CMD_ACCOUNT_COLUMN_SERVER_CERT_USE 서버 인증서 확인
|
||||
CMD_ACCOUNT_COLUMN_SERVER_CERT_NAME 등록 된 서버 별 인증서
|
||||
CMD_ACCOUNT_COLUMN_RETRY_ON_SERVER_CERT Retry on Untrusted Server Certificate
|
||||
CMD_ACCOUNT_COLUMN_ADD_DEFAULT_CA 시스템 인증서 저장소 신뢰
|
||||
CMD_ACCOUNT_COLUMN_DEVICE_NAME 연결에 사용할 장치 이름
|
||||
CMD_ACCOUNT_COLUMN_AUTH_TYPE 인증의 종류
|
||||
CMD_ACCOUNT_COLUMN_AUTH_USERNAME 사용자 이름
|
||||
@ -5477,6 +5479,20 @@ CMD_CascadeServerCertDisable_Args CascadeServerCertDisable [name]
|
||||
CMD_CascadeServerCertDisable_[name] 설정을 변경 계단식의 이름을 지정합니다.
|
||||
|
||||
|
||||
# CascadeDefaultCAEnable command
|
||||
CMD_CascadeDefaultCAEnable Enable Trust System Certificate Store Option
|
||||
CMD_CascadeDefaultCAEnable_Help When server certificate verification is enabled, use this to enable trusting certificates from the system trust store. \nIf server certificate verification is disabled, this option does nothing.
|
||||
CMD_CascadeDefaultCAEnable_Args CascadeDefaultCAEnable [name]
|
||||
CMD_CascadeDefaultCAEnable_[name] Specify the name of the Cascade Connection whose setting you want to change.
|
||||
|
||||
|
||||
# CascadeDefaultCADisable command
|
||||
CMD_CascadeDefaultCADisable Disable Trust System Certificate Store Option
|
||||
CMD_CascadeDefaultCADisable_Help When server certificate verification is enabled, use this to disable trusting certificates from the system trust store. \nIf server certificate verification is disabled, this option does nothing.
|
||||
CMD_CascadeDefaultCADisable_Args CascadeDefaultCADisable [name]
|
||||
CMD_CascadeDefaultCADisable_[name] Specify the name of the Cascade Connection whose setting you want to change.
|
||||
|
||||
|
||||
# CascadeServerCertSet 명령
|
||||
CMD_CascadeServerCertSet 계단식 서버 별 인증서 설정
|
||||
CMD_CascadeServerCertSet_Help 현재 관리하고있는 가상 HUB에 등록되어있는 계단식 지정하고 계단식가 VPN Server에 연결할 때 연결하려는 VPN Server가 제시하는 SSL 인증서와 동일한 인증서를 미리 등록합니다. \n 계단식 서버 인증서 검증 옵션이 활성화되어있는 경우 연결할 서버의 SSL 인증서를 미리이 명령에서 계단식 설정에 저장할하거나 가상 HUB의 신뢰 인증 기관의 인증서 목록에 서버의 SSL 인증서를 서명 한 루트 인증서를 CAAdd 명령 등으로 등록되어 있어야합니다. \n 계단식 서버 인증서 검증 옵션이 활성화되어있는 상태에서 연결 한 VPN Server의 인증서를 신뢰할 수없는 경우 즉시 연결을 해제하고 재 시도를 반복합니다. \n이 명령은 클러스터로 작동하는 VPN Server의 가상 HUB에서는 실행되지 않습니다.
|
||||
@ -6787,6 +6803,20 @@ CMD_AccountRetryOnServerCertDisable_Args AccountRetryOnServerCertDisable [name]
|
||||
CMD_AccountRetryOnServerCertDisable_[name] Specify the name of the VPN Connection Setting whose setting you want to change.
|
||||
|
||||
|
||||
# AccountDefaultCAEnable command
|
||||
CMD_AccountDefaultCAEnable Enable Trust System Certificate Store Option
|
||||
CMD_AccountDefaultCAEnable_Help When server certificate verification is enabled, use this to enable trusting certificates from the system trust store. \nIf server certificate verification is disabled, this option does nothing.
|
||||
CMD_AccountDefaultCAEnable_Args AccountDefaultCAEnable [name]
|
||||
CMD_AccountDefaultCAEnable_[name] Specify the name of the VPN Connection Setting whose setting you want to change.
|
||||
|
||||
|
||||
# AccountDefaultCADisable command
|
||||
CMD_AccountDefaultCADisable Disable Trust System Certificate Store Option
|
||||
CMD_AccountDefaultCADisable_Help When server certificate verification is enabled, use this to disable trusting certificates from the system trust store. \nIf server certificate verification is disabled, this option does nothing.
|
||||
CMD_AccountDefaultCADisable_Args AccountDefaultCADisable [name]
|
||||
CMD_AccountDefaultCADisable_[name] Specify the name of the VPN Connection Setting whose setting you want to change.
|
||||
|
||||
|
||||
# AccountServerCertSet 명령
|
||||
CMD_AccountServerCertSet 연결 설정 서버 별 인증서 설정
|
||||
CMD_AccountServerCertSet_Help VPN Client에 등록되어있는 연결 설정을 지정하고 연결 설정 VPN Server에 연결할 때 연결하려는 VPN Server가 제시하는 SSL 인증서와 동일한 인증서를 미리 등록합니다. \n 연결 설정 서버 인증서 검증 옵션이 활성화되어있는 경우 연결할 서버의 SSL 인증서를 미리이 명령에서 연결 설정 설정에 저장할하거나 가상 HUB 신뢰하는 인증 기관 인증서 목록에 서버의 SSL 인증서를 서명 한 루트 인증서를 CAAdd 명령 등으로 등록되어 있어야합니다. \n 연결 설정 서버 인증서 검증 옵션이 활성화되어있는 상태에서 연결 한 VPN Server의 인증서를 신뢰할 수없는 경우 즉시 연결을 해제하고 재 시도를 반복합니다.
|
||||
|
||||
@ -231,6 +231,7 @@ ERR_145 Unacceptable operation. Use the VPN Gate Utility to modify the connectio
|
||||
ERR_146 The VPN Gate Service is running inside the VPN Client program. You cannot stop the VPN Gate Service on this screen. Use the VPN Client Manager to enable or disable the VPN Gate Service.
|
||||
ERR_147 This feature is not supported. It hasn't been implemented yet on the open-source version of SoftEther VPN.
|
||||
ERR_148 The VPN connection was disconnected because the system is being suspended.
|
||||
ERR_149 The destination VPN Server's certificate does not match the specified hostname.
|
||||
|
||||
|
||||
# Concerning licenses
|
||||
@ -2299,6 +2300,7 @@ R_SOCKS5 Conectar via servidor proxy &SOCKS5
|
||||
B_PROXY_CONFIG Configuração do servidor &proxy
|
||||
STATIC11 Opção de verificação do certificado do servidor:
|
||||
R_CHECK_CERT Sempre verificar o certificado do servidor
|
||||
R_TRUST_DEFAULT Confie no armazenamento de certificados do sistema
|
||||
B_TRUST Gerenciar lista de &certificados CA confiáveis
|
||||
B_SERVER_CERT Certificado &individual
|
||||
B_VIEW_SERVER_CERT &Mostrar individual
|
||||
@ -4112,6 +4114,7 @@ CMD_ACCOUNT_COLUMN_PROXY_USERNAME Proxy Server User Name
|
||||
CMD_ACCOUNT_COLUMN_SERVER_CERT_USE Verify Server Certificate
|
||||
CMD_ACCOUNT_COLUMN_SERVER_CERT_NAME Registered Server Individual Certificate
|
||||
CMD_ACCOUNT_COLUMN_RETRY_ON_SERVER_CERT Retry on Untrusted Server Certificate
|
||||
CMD_ACCOUNT_COLUMN_ADD_DEFAULT_CA Trust System Certificate Store
|
||||
CMD_ACCOUNT_COLUMN_DEVICE_NAME Device Name Used for Connection
|
||||
CMD_ACCOUNT_COLUMN_AUTH_TYPE Authentication Type
|
||||
CMD_ACCOUNT_COLUMN_AUTH_USERNAME Nome de usuário
|
||||
@ -5225,6 +5228,20 @@ CMD_CascadeServerCertDisable_Args CascadeServerCertDisable [name]
|
||||
CMD_CascadeServerCertDisable_[name] Specify the name of the Cascade Connection whose setting you want to change.
|
||||
|
||||
|
||||
# CascadeDefaultCAEnable command
|
||||
CMD_CascadeDefaultCAEnable Enable Trust System Certificate Store Option
|
||||
CMD_CascadeDefaultCAEnable_Help When server certificate verification is enabled, use this to enable trusting certificates from the system trust store. \nIf server certificate verification is disabled, this option does nothing.
|
||||
CMD_CascadeDefaultCAEnable_Args CascadeDefaultCAEnable [name]
|
||||
CMD_CascadeDefaultCAEnable_[name] Specify the name of the Cascade Connection whose setting you want to change.
|
||||
|
||||
|
||||
# CascadeDefaultCADisable command
|
||||
CMD_CascadeDefaultCADisable Disable Trust System Certificate Store Option
|
||||
CMD_CascadeDefaultCADisable_Help When server certificate verification is enabled, use this to disable trusting certificates from the system trust store. \nIf server certificate verification is disabled, this option does nothing.
|
||||
CMD_CascadeDefaultCADisable_Args CascadeDefaultCADisable [name]
|
||||
CMD_CascadeDefaultCADisable_[name] Specify the name of the Cascade Connection whose setting you want to change.
|
||||
|
||||
|
||||
# CascadeServerCertSet command
|
||||
CMD_CascadeServerCertSet Set the Server Individual Certificate for Cascade Connection
|
||||
CMD_CascadeServerCertSet_Help When a Cascade Connection registered on the currently managed Virtual Hub is specified and that Cascade Connection connects to a VPN Server, use this to register beforehand the same certificate as the SSL certificate provided by the destination VPN Server. \nIf the option to verify server certificates for Cascade Connections is enabled, you must either use this command to save the connection destination server SSL certificate beforehand in the Cascade Connection Settings beforehand, or use the CAAdd command etc. to register a root certificate containing the signed server SSL certificate in the list of Virtual Hub trusted CA certificates. \nIf the certificate of the connected VPN Server cannot be trusted under the condition where the option to verify server certificates was enabled for the Cascade Connection, the connection will be promptly cancelled and continual reattempts at connection will be made. \nYou cannot execute this command for Virtual Hubs of VPN Servers operating as a cluster.
|
||||
@ -6539,6 +6556,20 @@ CMD_AccountRetryOnServerCertDisable_Args AccountRetryOnServerCertDisable [name]
|
||||
CMD_AccountRetryOnServerCertDisable_[name] Specify the name of the VPN Connection Setting whose setting you want to change.
|
||||
|
||||
|
||||
# AccountDefaultCAEnable command
|
||||
CMD_AccountDefaultCAEnable Enable Trust System Certificate Store Option
|
||||
CMD_AccountDefaultCAEnable_Help When server certificate verification is enabled, use this to enable trusting certificates from the system trust store. \nIf server certificate verification is disabled, this option does nothing.
|
||||
CMD_AccountDefaultCAEnable_Args AccountDefaultCAEnable [name]
|
||||
CMD_AccountDefaultCAEnable_[name] Specify the name of the VPN Connection Setting whose setting you want to change.
|
||||
|
||||
|
||||
# AccountDefaultCADisable command
|
||||
CMD_AccountDefaultCADisable Disable Trust System Certificate Store Option
|
||||
CMD_AccountDefaultCADisable_Help When server certificate verification is enabled, use this to disable trusting certificates from the system trust store. \nIf server certificate verification is disabled, this option does nothing.
|
||||
CMD_AccountDefaultCADisable_Args AccountDefaultCADisable [name]
|
||||
CMD_AccountDefaultCADisable_[name] Specify the name of the VPN Connection Setting whose setting you want to change.
|
||||
|
||||
|
||||
# AccountServerCertSet command
|
||||
CMD_AccountServerCertSet Set Server Individual Certificate for VPN Connection Setting
|
||||
CMD_AccountServerCertSet_Help When a VPN Connection Setting registered on the VPN Client is specified and that VPN Connection Setting connects to a VPN Server, use this to register the same certificate as the SSL certificate provided by the destination VPN Server. \nIf the option to verify server certificates for VPN Connection Settings is enabled, you must either use this command to save the connection destination server SSL certificate beforehand in the VPN Connection Setting settings beforehand, or use the CAAdd command etc. to register a root certificate containing the signed server SSL certificate in the list of Virtual Hub trusted CA certificates. \nIf the certificate of the connected VPN Server cannot be trusted under the condition where the option to verify server certificates has been enabled for the VPN Connection Setting, the connection will be promptly cancelled and continual reattempts at connection will be made.
|
||||
|
||||
@ -212,6 +212,8 @@ ERR_145 Unacceptable operation. Use the VPN Gate Utility to modify the conne
|
||||
ERR_146 The VPN Gate Service is running inside the VPN Client program. You cannot stop the VPN Gate Service on this screen. Use the VPN Client Manager to enable or disable the VPN Gate Service.
|
||||
ERR_147 This feature is not supported. It hasn't been implemented yet on the open-source version of SoftEther VPN.
|
||||
ERR_148 The VPN connection was disconnected because the system is being suspended.
|
||||
ERR_149 The destination VPN Server's certificate does not match the specified hostname.
|
||||
|
||||
|
||||
# Concerning licenses
|
||||
LICENSE_INFO_URL https://selinks.org/?new_license
|
||||
@ -2322,6 +2324,7 @@ R_SOCKS5 Connect via &SOCKS5 Proxy Server
|
||||
B_PROXY_CONFIG P&roxy Server Setting
|
||||
STATIC11 Server Certificate Veri&fication Option:
|
||||
R_CHECK_CERT Always Verify Server &Certificate
|
||||
R_TRUST_DEFAULT Trust System Certificate Store
|
||||
B_TRUST Manage Trusted CA &Certificate List
|
||||
B_SERVER_CERT &Specify Individual Cert
|
||||
B_VIEW_SERVER_CERT Show Indi&vidual Cert
|
||||
@ -4395,6 +4398,7 @@ CMD_ACCOUNT_COLUMN_PROXY_PORT Proxy Server Port Number
|
||||
CMD_ACCOUNT_COLUMN_PROXY_USERNAME Proxy Server User Name
|
||||
CMD_ACCOUNT_COLUMN_SERVER_CERT_USE Verify Server Certificate
|
||||
CMD_ACCOUNT_COLUMN_SERVER_CERT_NAME Registered Server Individual Certificate
|
||||
CMD_ACCOUNT_COLUMN_ADD_DEFAULT_CA Trust System Certificate Store
|
||||
CMD_ACCOUNT_COLUMN_DEVICE_NAME Device Name Used for Connection
|
||||
CMD_ACCOUNT_COLUMN_AUTH_TYPE Authentication Type
|
||||
CMD_ACCOUNT_COLUMN_AUTH_USERNAME User Name
|
||||
@ -5497,6 +5501,20 @@ CMD_CascadeServerCertDisable_Args CascadeServerCertDisable [name]
|
||||
CMD_CascadeServerCertDisable_[name] Specify the name of the Cascade Connection whose setting you want to change.
|
||||
|
||||
|
||||
# CascadeDefaultCAEnable command
|
||||
CMD_CascadeDefaultCAEnable Enable Trust System Certificate Store Option
|
||||
CMD_CascadeDefaultCAEnable_Help When server certificate verification is enabled, use this to enable trusting certificates from the system trust store. \nIf server certificate verification is disabled, this option does nothing.
|
||||
CMD_CascadeDefaultCAEnable_Args CascadeDefaultCAEnable [name]
|
||||
CMD_CascadeDefaultCAEnable_[name] Specify the name of the Cascade Connection whose setting you want to change.
|
||||
|
||||
|
||||
# CascadeDefaultCADisable command
|
||||
CMD_CascadeDefaultCADisable Disable Trust System Certificate Store Option
|
||||
CMD_CascadeDefaultCADisable_Help When server certificate verification is enabled, use this to disable trusting certificates from the system trust store. \nIf server certificate verification is disabled, this option does nothing.
|
||||
CMD_CascadeDefaultCADisable_Args CascadeDefaultCADisable [name]
|
||||
CMD_CascadeDefaultCADisable_[name] Specify the name of the Cascade Connection whose setting you want to change.
|
||||
|
||||
|
||||
# CascadeServerCertSet command
|
||||
CMD_CascadeServerCertSet Set the Server Individual Certificate for Cascade Connection
|
||||
CMD_CascadeServerCertSet_Help When a Cascade Connection registered on the currently managed Virtual Hub is specified and that Cascade Connection connects to a VPN Server, use this to register beforehand the same certificate as the SSL certificate provided by the destination VPN Server. \nIf the option to verify server certificates for Cascade Connections is enabled, you must either use this command to save the connection destination server SSL certificate beforehand in the Cascade Connection Settings beforehand, or use the CAAdd command etc. to register a root certificate containing the signed server SSL certificate in the list of Virtual Hub trusted CA certificates. \nIf the certificate of the connected VPN Server cannot be trusted under the condition where the option to verify server certificates was enabled for the Cascade Connection, the connection will be promptly cancelled and continual reattempts at connection will be made. \nYou cannot execute this command for Virtual Hubs of VPN Servers operating as a cluster.
|
||||
@ -6790,6 +6808,20 @@ CMD_AccountServerCertDisable_Args AccountServerCertDisable [name]
|
||||
CMD_AccountServerCertDisable_[name] Specify the name of the VPN Connection Setting whose setting you want to change.
|
||||
|
||||
|
||||
# AccountDefaultCAEnable command
|
||||
CMD_AccountDefaultCAEnable Enable Trust System Certificate Store Option
|
||||
CMD_AccountDefaultCAEnable_Help When server certificate verification is enabled, use this to enable trusting certificates from the system trust store. \nIf server certificate verification is disabled, this option does nothing.
|
||||
CMD_AccountDefaultCAEnable_Args AccountDefaultCAEnable [name]
|
||||
CMD_AccountDefaultCAEnable_[name] Specify the name of the VPN Connection Setting whose setting you want to change.
|
||||
|
||||
|
||||
# AccountDefaultCADisable command
|
||||
CMD_AccountDefaultCADisable Disable Trust System Certificate Store Option
|
||||
CMD_AccountDefaultCADisable_Help When server certificate verification is enabled, use this to disable trusting certificates from the system trust store. \nIf server certificate verification is disabled, this option does nothing.
|
||||
CMD_AccountDefaultCADisable_Args AccountDefaultCADisable [name]
|
||||
CMD_AccountDefaultCADisable_[name] Specify the name of the VPN Connection Setting whose setting you want to change.
|
||||
|
||||
|
||||
# AccountServerCertSet command
|
||||
CMD_AccountServerCertSet Set Server Individual Certificate for VPN Connection Setting
|
||||
CMD_AccountServerCertSet_Help When a VPN Connection Setting registered on the VPN Client is specified and that VPN Connection Setting connects to a VPN Server, use this to register the same certificate as the SSL certificate provided by the destination VPN Server. \nIf the option to verify server certificates for VPN Connection Settings is enabled, you must either use this command to save the connection destination server SSL certificate beforehand in the VPN Connection Setting settings beforehand, or use the CAAdd command etc. to register a root certificate containing the signed server SSL certificate in the list of Virtual Hub trusted CA certificates. \nIf the certificate of the connected VPN Server cannot be trusted under the condition where the option to verify server certificates has been enabled for the VPN Connection Setting, the connection will be promptly cancelled and continual reattempts at connection will be made.
|
||||
|
||||
@ -218,6 +218,7 @@ ERR_145 不可接受的操作。使用 VPN Gate 實用工具修改 VPN Gate
|
||||
ERR_146 VPN Gate 服務運行在 VPN 用戶端程式內。在此螢幕上，你不能停止 VPN Gate 服務。使用 VPN 用戶端管理器來啟用或禁用 VPN Gate 服務。
|
||||
ERR_147 不支援此功能。它尚未在 SoftEther VPN 的開源版本上實施。
|
||||
ERR_148 VPN 連接被中斷，因為該系統被暫停。
|
||||
ERR_149 目標 VPN Server 的證書與指定的主機名稱不匹配。
|
||||
|
||||
|
||||
#關於許可證
|
||||
@ -2342,6 +2343,7 @@ R_SOCKS5 通過 SOCKS5 代理伺服器連接(&S)
|
||||
B_PROXY_CONFIG 代理伺服器設置(&R)
|
||||
STATIC11 服務端證書驗證選項(&F):
|
||||
R_CHECK_CERT 總是驗證服務端證書(&C)
|
||||
R_TRUST_DEFAULT 信任系統憑證存放區
|
||||
B_TRUST 管理可信發證機關證書列表(&C)
|
||||
B_SERVER_CERT 指定特定證書(&S)
|
||||
B_VIEW_SERVER_CERT 查看特定證書(&V)
|
||||
@ -4411,7 +4413,8 @@ CMD_ACCOUNT_COLUMN_PROXY_PORT 代理伺服器的埠號
|
||||
CMD_ACCOUNT_COLUMN_PROXY_USERNAME 代理伺服器的用戶名
|
||||
CMD_ACCOUNT_COLUMN_SERVER_CERT_USE 驗證伺服器憑證
|
||||
CMD_ACCOUNT_COLUMN_SERVER_CERT_NAME 註冊的伺服器個人證書
|
||||
CMD_ACCOUNT_COLUMN_RETRY_ON_SERVER_CERT Retry on Untrusted Server Certificate
|
||||
CMD_ACCOUNT_COLUMN_RETRY_ON_SERVER_CERT 遇到不信任的證書時重試
|
||||
CMD_ACCOUNT_COLUMN_ADD_DEFAULT_CA 信任系統憑證存放區
|
||||
CMD_ACCOUNT_COLUMN_DEVICE_NAME 用於連接的設備名
|
||||
CMD_ACCOUNT_COLUMN_AUTH_TYPE 驗證類型
|
||||
CMD_ACCOUNT_COLUMN_AUTH_USERNAME 用戶名
|
||||
@ -4426,7 +4429,7 @@ CMD_ACCOUNT_COLUMN_BRIDGE_ROUTER 通過橋接器 / 路由模式連接
|
||||
CMD_ACCOUNT_COLUMN_MONITOR 通過監測模式連接
|
||||
CMD_ACCOUNT_COLUMN_NO_TRACKING 不要調整路由表
|
||||
CMD_ACCOUNT_COLUMN_QOS_DISABLE 不要使用 QoS 控制功能
|
||||
CMD_ACCOUNT_COLUMN_DISABLEUDP Disable UDP Acceleration
|
||||
CMD_ACCOUNT_COLUMN_DISABLEUDP 禁用 UDP 加速功能
|
||||
|
||||
|
||||
# Debugging Information Collecting Tool
|
||||
@ -5514,6 +5517,20 @@ CMD_CascadeServerCertDisable_Args CascadeServerCertDisable [name]
|
||||
CMD_CascadeServerCertDisable_[name] 指定級聯名稱來改變設置。
|
||||
|
||||
|
||||
# CascadeDefaultCAEnable 命令
|
||||
CMD_CascadeDefaultCAEnable 啟用信任系統憑證存放區選項
|
||||
CMD_CascadeDefaultCAEnable_Help 當啟用服務器憑證驗證時，使用此選項來啟用信任系統憑證存放區的證書。\n如果禁用服務器憑證驗證，則此選項不執行任何操作。
|
||||
CMD_CascadeDefaultCAEnable_Args CascadeDefaultCAEnable [name]
|
||||
CMD_CascadeDefaultCAEnable_[name] 指定級聯名稱來改變設置。
|
||||
|
||||
|
||||
# CascadeDefaultCADisable 命令
|
||||
CMD_CascadeDefaultCADisable 禁用信任系統憑證存放區選項
|
||||
CMD_CascadeDefaultCADisable_Help 當啟用服務器憑證驗證時，使用此選項來禁用信任系統憑證存放區的證書。\n如果禁用服務器憑證驗證，則此選項不執行任何操作。
|
||||
CMD_CascadeDefaultCADisable_Args CascadeDefaultCADisable [name]
|
||||
CMD_CascadeDefaultCADisable_[name] 指定級聯名稱來改變設置。
|
||||
|
||||
|
||||
# CascadeServerCertSet 命令
|
||||
CMD_CascadeServerCertSet 設置級聯連接的伺服器特定證書
|
||||
CMD_CascadeServerCertSet_Help 指定已經在當前虛擬 HUB 註冊的級聯連接，當此連接和 VPN Server 之間通信時，事先將連接方提供的 SSL 證書註冊。\n如果啟用此選項，需要將在目標伺服器的證書事先通過指令設置到級聯的連接設置中，或者在虛擬 HUB 的可信任證書清單中，運行 CAAdd 指令，將有伺服器的 SSL 證書署名的路線證書添加進去。\n當啟用伺服器憑證驗證選項時，如果 VPN Server 提供的證書不可信，連接將斷開，並重試。\n此命令在集群虛擬 HUB 中不能運行。
|
||||
@ -6819,6 +6836,20 @@ CMD_AccountRetryOnServerCertDisable_Args AccountRetryOnServerCertDisable [name]
|
||||
CMD_AccountRetryOnServerCertDisable_[name] Specify the name of the VPN Connection Setting whose setting you want to change.
|
||||
|
||||
|
||||
# AccountDefaultCAEnable 命令
|
||||
CMD_AccountDefaultCAEnable 啟用信任系統憑證存放區選項
|
||||
CMD_AccountDefaultCAEnable_Help 當啟用服務器憑證驗證時，使用此選項來啟用信任系統憑證存放區的證書。\n如果禁用服務器憑證驗證，則此選項不執行任何操作。
|
||||
CMD_AccountDefaultCAEnable_Args AccountDefaultCAEnable [name]
|
||||
CMD_AccountDefaultCAEnable_[name] 指定要更改設置的連接設置名。
|
||||
|
||||
|
||||
# AccountDefaultCADisable 命令
|
||||
CMD_AccountDefaultCADisable 禁用信任系統憑證存放區選項
|
||||
CMD_AccountDefaultCADisable_Help 當啟用服務器憑證驗證時，使用此選項來禁用信任系統憑證存放區的證書。\n如果禁用服務器憑證驗證，則此選項不執行任何操作。
|
||||
CMD_AccountDefaultCADisable_Args AccountDefaultCADisable [name]
|
||||
CMD_AccountDefaultCADisable_[name] 指定要更改設置的連接設置名。
|
||||
|
||||
|
||||
# AccountServerCertSet 命令
|
||||
CMD_AccountServerCertSet 設置連接設置的伺服器固有證明書
|
||||
CMD_AccountServerCertSet_Help 指定註冊到 VPN Client 的連接設置，其連接設置連接到 VPN Server 時，預先註冊與連接目標的 VPN Server 提交的 SSL 證書相同的證書。\n如果啟動了連接設置的伺服器憑證驗證選項，可以預先將連接目標伺服器的 SSL 證書以此指令保存在連接設置的設置內，或需要將伺服器的 SSL 證書簽名了的根證書，以 CAAdd 指令註冊到虛擬 HUB 信任的證明機構的證書列表中。\n驗證連接設置的伺服器憑證的選項處於啟動狀態，連接了的 VPN Server 的證書不可信時，立即解除連接，反復重試。
|
||||
|
||||
Reference in New Issue
Block a user