alicloud_ssl_vpn_client_cert

Provides a SSL VPN client cert resource.

-> NOTE: Terraform will auto build SSL VPN client certs while it uses alicloud_ssl_vpn_client_cert to build a ssl vpn client certs resource. It depends on VPN instance and SSL VPN Server.

-> NOTE: Available since v1.15.0.

Example Usage

Basic Usage

variable "name" {
  default = "tf-example"
}
provider "alicloud" {
  region = "cn-hangzhou"
}
data "alicloud_zones" "default" {
  available_resource_creation = "VSwitch"
}
data "alicloud_vpcs" "default" {
  name_regex = "^default-NODELETING$"
}
data "alicloud_vswitches" "default" {
  vpc_id  = data.alicloud_vpcs.default.ids.0
  zone_id = data.alicloud_zones.default.ids.0
}

resource "alicloud_vpn_gateway" "default" {
  name                 = var.name
  vpc_id               = data.alicloud_vpcs.default.ids.0
  bandwidth            = "10"
  enable_ssl           = true
  description          = var.name
  instance_charge_type = "PrePaid"
  vswitch_id           = data.alicloud_vswitches.default.ids.0
}


resource "alicloud_ssl_vpn_server" "default" {
  name           = var.name
  vpn_gateway_id = alicloud_vpn_gateway.default.id
  client_ip_pool = cidrsubnet(data.alicloud_vpcs.default.vpcs.0.cidr_block, 8, 8)
  local_subnet   = cidrsubnet(data.alicloud_vpcs.default.vpcs.0.cidr_block, 8, 8)
  protocol       = "UDP"
  cipher         = "AES-128-CBC"
  port           = "1194"
  compress       = "false"
}

resource "alicloud_ssl_vpn_client_cert" "default" {
  ssl_vpn_server_id = alicloud_ssl_vpn_server.default.id
  name              = var.name
}

Argument Reference

The following arguments are supported:

• name - (Optional) The name of the client certificate.
• ssl_vpn_server_id - (Required, ForceNew) The ID of the SSL-VPN server.
• status - (Optional) The status of the client certificate.
• ca_cert - (Optional) The client ca cert.
• client_cert - (Optional) The client cert.
• client_key - (Optional) The client key.
• client_config - (Optional) The vpn client config.

Attributes Reference

The following attributes are exported:

• id - The ID of the SSL-VPN client certificate.

Import

SSL-VPN client certificates can be imported using the id, e.g.

$ terraform import alicloud_ssl_vpn_client_cert.example vsc-abc123456