{"id":941,"date":"2010-04-01T10:40:12","date_gmt":"2010-04-01T02:40:12","guid":{"rendered":"http:\/\/blog.nuface.tw\/?p=941"},"modified":"2018-05-11T16:29:13","modified_gmt":"2018-05-11T08:29:13","slug":"openvpn-%e5%bb%ba%e7%bd%ae%e7%ad%86%e8%a8%98%e7%ac%ac4%e9%9b%86","status":"publish","type":"post","link":"https:\/\/blog.nuface.tw\/?p=941","title":{"rendered":"OpenVPN \u5efa\u7f6e\u7b46\u8a18(\u7b2c4\u96c6)"},"content":{"rendered":"

\u672c\u96c6\u91cd\u9ede\u5728\u8a2d\u5b9aCertificate Authority (CA) \u3002\u8981\u9032\u5165\u8a2d\u5b9aOpenVPN\u7684\u7b2c\u4e00\u6b65\u662f\uff0c\u5efa\u7acbPKI(\u516c\u9470\u67b6\u69cb)\uff0c\u90e8\u4efd\u76f8\u95dc\u7684\u57fa\u790e\u77e5\u8b58\uff0c\u53ef\u4ee5\u53c3\u8003\u9019\u7bc7 \u5982\u4f55\u88fd\u4f5c SSL X.509\u6191\u8b49<\/a>\u3002<\/p>\n


\n\"OpenVPN\"
\nOpenVPN: Building and Integrating Virtual Private Networks <\/a><\/p>\n

\u524d\u60c5\u63d0\u8981\uff1aOpenVPN \u5efa\u7f6e\u7b46\u8a18(\u7b2c3\u96c6)<\/a><\/p>\n

PKI \uff0c\u5305\u542b\u90a3\u4e9b\u6771\u897f\u5462\uff1f
\n1. \u70ba\u4f3a\u670d\u5668\u53ca\u4f7f\u7528\u8005\u7aef\u5efa\u7acb\u516c\u9470\u53ca\u79c1\u9470\u3002
\n2. \u5efa\u7acbRoot CA \uff0c\u4ee5\u4fbf\u5e6b\u4f3a\u670d\u5668\u53ca\u4f7f\u7528\u8005\u7aef\uff0c\u7c3d\u767c\u6191\u8b49\u3002<\/p>\n

OpenVPN \uff0c\u53ef\u4ee5\u4f7f\u7528\u6191\u8b49\uff0c\u9032\u884c\u96d9\u5411\u7684\u8a8d\u8b49\u4f5c\u696d\uff1b\u4e5f\u5c31\u662f\u5728\u5efa\u7acbVPN \u9023\u7dda\u7684\u540c\u6642\uff0c\u9664\u4e86Server \u8981\u8a8d\u8b49Client \u7aef\u7684\u6191\u8b49\uff0cClient \u4e5f\u8981\u8a8d\u8b49Server \u7aef\u7684\u6191\u8b49\u3002<\/p>\n

\u7576Server \u53caClient \u7aef\u5728\u4e92\u76f8\u8a8d\u8b49\u6642\uff0c\u6703\u5229\u7528Root CA \u7684\u516c\u9470\uff0c\u9032\u884c\u5c0d\u65b9\u6191\u8b49\u7684\u9a57\u8b49\uff0c\u7136\u5f8c\u6703\u518d\u9032\u884c\u4e00\u4e9b\u5176\u5b83\u8cc7\u8a0a\u7684\u6e2c\u8a66\uff0c\u4f8b\u5982\uff0c\u9a57\u8b49\u5c0d\u65b9\u6191\u8b49\u4e0a\u7684common name \uff0c\u6216\u6191\u8b49\u7684\u985e\u5225\u3002<\/p>\n

\u9019\u6a23\u7684\u5b89\u5168\u6a5f\u5236\uff0c\u6709\u4ec0\u9ebc\u597d\u8655\u5462\uff1f<\/p>\n

1. Server \u7aef\u53ea\u9700\u8981\u77e5\u9053\u5b83\u81ea\u5df1\u7684\u6191\u8b49\u53ca\u79c1\u9470\uff0c\u4e26\u4e0d\u9700\u8981\u53bb\u77e5\u9053\uff0c\u500b\u5225\u53ef\u80fd\u6703\u9023\u7dda\u9032\u4f86\u7684Client \u7684\u6191\u8b49\u53ca\u79c1\u9470\u3002<\/p>\n

2. Server \u53ea\u63a5\u53d7\u7531\u540c\u4e00\u500bRoot CA \u6240\u7c3d\u767c\u51fa\u4f86\u7684Client \u7aef\u6191\u8b49\u3002Server \u4e0d\u9700\u8981Root CA \u7684\u79c1\u9470\uff0c\u5373\u53ef\u9032\u884c\u9a57\u8b49\u3002\u6240\u4ee5 Root CA \u79c1\u9470\uff0c\u53ef\u4ee5\u5728\u5b89\u5168\u7684\u4fdd\u5b58\u5728\u5176\u5b83\u7684\u6a5f\u5668\u4e0a\u3002<\/p>\n

3. \u5982\u679cClient \u7aef\u7684\u79c1\u9470\uff0c\u6709\u554f\u984c\u7684\u8a71\uff0c\u53ef\u4ee5\u628a\u5b83\u52a0\u5165\u5931\u6548\u5217\u8868\uff0c\u9019\u6a23\u5373\u53ef\u5728\u9023\u7dda\u6642\uff0c\u62d2\u7d55VPN \u9023\u7dda\u3002<\/p>\n

4. Server \u53ef\u4ee5\u5229\u7528\u6191\u8b49\u4e2d\u7684\u8cc7\u8a0a\uff0c\u4f8b\u5982\uff1acommon name \u9650\u5236\u7279\u5b9aUser \u7684\u5b58\u53d6\u6b0a\u9650\u3002<\/p>\n

\u597d\u8655\u8b1b\u5b8c\u4e86\uff0c\u63a5\u8457\u4f86\u5efa\u7acbRoot CA \u53ca\u76f8\u95dc\u7684\u6191\u8b49\u5427\uff01<\/p>\n

\u9019\u6b21\u6e2c\u8a66\u6211\u5011\u5c07\u5efa\u7acbRoot CA , Server \u6191\u8b49\uff0c\u53ca3\u500b User \u7aef\u6191\u8b49\u3002<\/p>\n

\u5728PKI \u7684\u7ba1\u7406\u4e0a\uff0c\u6211\u5011\u4f7f\u7528OpenVPN \u5167\u5efa\u7684Script \u4f86\u9032\u884c\u76f8\u95dc\u4f5c\u696d\u3002<\/p>\n

\u5728Linux \u4e0b\uff0c\u9019\u4e9bScript \u4f4d\u65bceasy-rsa \u76ee\u9304\u4e0b\uff0c\u5728\u5b89\u88dd\u6642\uff0c\u6703\u6309\u5b89\u88dd\u65b9\u5f0f\u7684\u4e0d\u540c\uff0c\u800c\u5efa\u7acb\u5728\u4e0d\u540c\u7684\u76ee\u9304\u4e0b\u3002\u5982\u679c\u662f\u7528RPM \u7684\u65b9\u5f0f\u5b89\u88dd\uff0c\u76ee\u9304\u5728\uff0c\/usr\/share\/doc\/packages\/openvpn \u6216 \/usr\/share\/doc\/openvpn-2.0 \uff0c\u5982\u679c\u662f\u4f7f\u7528tar.gz \u5b89\u88dd\u7684\u8a71\uff0c\u9019\u500beasy-rsa \u76ee\u9304\uff0c\u6703\u5728\u89e3\u958b\u9019\u500btar.gz\u6a94\u7684\u7b2c1\u5c64\u76ee\u9304\u4e0b\u3002\u6700\u597d\u662f\u628a\u9019\u500b\u76ee\u9304\uff0c\u53e6\u5916\u8907\u88fd\u51fa\u4f86\uff0c\u653e\u5728\u5176\u5b83\u76ee\u9304\u4e0b\uff0c\u4f8b\u5982\uff1a\/etc\/openvpn \u4e0b\uff0c\u672a\u4f86\u5982\u679cOpenVPN \u5347\u7d1a\u6642\uff0c\u5c31\u4e0d\u6703\u628a\u6211\u5011\u624b\u52d5\u7684\u8a2d\u5b9a\u6a94\u84cb\u6389\u3002<\/p>\n

\u5c0f\u745e\u7684\u6e2c\u8a66\u74b0\u5883 easy-rsa \u76ee\u9304\u653e\u5728 \/usr\/share\/doc\/openvpn-2.1_rc7 \u5148\u628a\u5b83copy \u5230\/etc\/openvpn \u4e0b<\/p>\n


\n[root@openvpn ~]#cp -rf \/usr\/share\/doc\/openvpn-2.1_rc7\/easy-rsa \/etc\/openvpn\/easy-rsa
\n<\/code><\/p><\/blockquote>\n

\u5207\u63db\u5230\u3000\/etc\/openvpn\/easy-rsa\/2.0\u76ee\u9304\uff0c\u4fee\u6539\u4e00\u4e0b vars \u6a94\u6848\uff0c\u91dd\u5c0dKEY_COUNTRY, KEY_PROVINCE, KEY_CITY, KEY_ORG, \u53ca KEY_EMAIL \u9019\u5e7e\u500b\u53c3\u6578\u8f38\u5165\uff0c\u6211\u5011\u7684\u81ea\u5df1\u7684\u8a2d\u5b9a\u503c\uff0c\u8acb\u4e0d\u8981\u7559\u7a7a\u54e6\uff01<\/p>\n

KEY_SIZE \u539f\u672c\u662f1024\uff0c\u70ba\u4e86\u589e\u52a0\u5b89\u5168\u6027\uff0c\u6539\u70ba 2048 \uff0c\u7576\u7136\u6709\u4e9b\u4ee3\u50f9\uff1b\u5728\u505aTLS \u6e9d\u901a\u6642\uff0c\u53ca\u7522\u751fDH \u53c3\u6578\u6642\uff0c\u6548\u80fd\u6703\u53d7\u5f71\u97ff\u3002<\/p>\n

\u5176\u5b83\u53c3\u6578\uff1a
\n
\nexport KEY_COUNTRY=”TW”
\nexport KEY_PROVINCE=”CA”
\nexport KEY_CITY=”Taipei”
\nexport KEY_ORG=”nuface”
\nexport KEY_EMAIL=”rico@nuface.tw”
\n<\/strong>
\n\u57f7\u884c vars \u9019\u500b\u6a94\u6848\uff0c\u8a2d\u5b9a\u74b0\u5883\u8b8a\u6578\uff0c\u63a5\u8457\u4f7f\u7528clean-all \uff0c\u91cd\u65b0\u6d17\u724c\uff1bbuild-ca \u5efa\u7acbRoot CA\u3002
\nps: clean-all \u53ea\u6709\u5728\u7b2c1\u6b21\u5efa\u7acbPKI \u67b6\u69cb\u6642\uff0c\u4f7f\u7528!<\/p>\n

\n[root@openvpn ~]#cd \/etc\/openvpn\/easy-rsa\/2.0
\n[root@openvpn ~]#. .\/vars (\u6ce8\u610f\uff0c\u6709\uff12\u500b\u9ede\u54e6)
\nNOTE: If you run .\/clean-all, I will be doing a rm -rf on \/etc\/openvpn\/easy-rsa\/2.0\/keys<\/p>\n

[root@openvpn ~]#.\/clean-all
\nPlease source the vars script first (i.e. “source .\/vars”)
\nMake sure you have edited it to reflect your configuration.<\/p>\n

[root@openvpn ~]#.\/build-ca
\nGenerating a 2048 bit RSA private key
\n…………………………………………………………………………………+++
\n………….+++
\nwriting new private key to ‘ca.key’
\n—–
\nYou are about to be asked to enter information that will be incorporated
\ninto your certificate request.
\nWhat you are about to enter is what is called a Distinguished Name or a DN.
\nThere are quite a few fields but you can leave some blank
\nFor some fields there will be a default value,
\nIf you enter ‘.’, the field will be left blank.
\n—–
\nCountry Name (2 letter code) [TW]:
\nState or Province Name (full name) [CA]:
\nLocality Name (eg, city) [Taipei]:
\nOrganization Name (eg, company) [nuface]:
\nOrganizational Unit Name (eg, section) []:
\nCommon Name (eg, your name or your server’s hostname) [nuface CA]:
\nEmail Address [rico@nuface.tw]:\n<\/p><\/blockquote>\n

\u9019\u6a23\u6211\u5011\u5c31\u5efa\u597d\u4e86Root CA \u7684Key \u4e86\uff01<\/p>\n

\u63a5\u8457\u4f7f\u7528build-key-server \u9019\u652fscript \u70ba OpenVPN Server \u5efa\u7acb\u6191\u8b49\uff1a<\/p>\n

\n[root@openvpn ~]#.\/build-key-server server
\nGenerating a 2048 bit RSA private key
\n…………………+++
\n……………………….+++
\nwriting new private key to ‘server.key’
\n—–
\nYou are about to be asked to enter information that will be incorporated
\ninto your certificate request.
\nWhat you are about to enter is what is called a Distinguished Name or a DN.
\nThere are quite a few fields but you can leave some blank
\nFor some fields there will be a default value,
\nIf you enter ‘.’, the field will be left blank.
\n—–
\nCountry Name (2 letter code) [TW]:
\nState or Province Name (full name) [CA]:
\nLocality Name (eg, city) [Taipei]:
\nOrganization Name (eg, company) [nuface]:
\nOrganizational Unit Name (eg, section) []:
\nCommon Name (eg, your name or your server’s hostname) [server]:
\nEmail Address [rico@nuface.tw]:\n<\/p><\/blockquote>\n

\u4ee5\u4e0a\u7684\u4f5c\u696d\uff0c\u57fa\u672c\u4e0a\u4f7f\u7528\u9810\u8a2d\u503c\u5373\u53ef\uff0c\u81f3\u65bc\u90a3\u500bcommon name \uff0c\u5c0f\u745e\u4f7f\u7528server \u9019\u500b\u540d\u5b57\uff0c\u57fa\u672c\u4e0a\u53ef\u4ee5\u6309\u5404\u81ea\u5be6\u969b\u7684\u72c0\u6cc1\uff0c\u8f38\u5165\u81ea\u5df1\u7684\u5be6\u969bhost name \u5373\u53ef\uff0c\u4f8b\u5982\uff1aopenvpn.nuface.tw \uff0c\u53e6\u5916\u67092\u500b\u554f\u53e5\uff0c\u56de\u7b54y \u5373\u53ef\u3002<\/p>\n

\u63a5\u8457\u4f86\u6309\u7167\u5287\u672c\uff0c\u5efa\u7acb3\u500bUser \u7684\u6191\u8b49\u3002<\/p>\n

\u76f4\u63a5\u4f7f\u7528build-key \u9019\u500bscripts \u4f86\u9032\u884c\u5efa\u7acb\u3002<\/p>\n

\n[root@openvpn ~]#.\/build-key client1
\n[root@openvpn ~]#.\/build-key client2
\n[root@openvpn ~]#.\/build-key client3\n<\/p><\/blockquote>\n

\u57fa\u672c\u4e0a\u8ddf\u4e0a\u9762\u7684server \u5efa\u7f6e\u7684\u65b9\u5f0f\u985e\u4f3c\uff0c\u53ea\u6709common name \u4e0d\u540c\uff0c\u505a\u500b\u5225\u4fee\u6539\u5373\u53ef\uff01\u90a3\u500bcommon name \uff0c\u5fc5\u9808\u4fdd\u6301\u552f\u4e00\u503c\uff0c\u4e5f\u5c31\u662fclient1 \u4f7f\u7528\u904e\u4e86\u4e4b\u5f8c\uff0c\u5c0d\u7b2c2\u500bUser \u5c31\u4e0d\u884c\u7528client1 \u4f86\u7576\u6210\u4ed6\u7684common name \uff0c\u5fc5\u9808\u53e6\u5916\u53d6\u4e00\u500b exp: client2 \u505a\u70bacommon name\u3002<\/p>\n

\u63a5\u8457\u4f86\u505a\u4e00\u500bD-H \u7684\u5bc6\u9470\u4ea4\u63db\u53c3\u6578\u3002 ( Diffie Hellman parameters)
\n\u9019\u500b\u8981\u505a\u4ec0\u9ebc\u7528\u5462\uff1f\u55ef\uff0e\uff0e\u6709\u6a5f\u6703\u518d\u7d30\u8aaa\uff0c\u4e3b\u8981\u7528\u9014\u5728\u52a0\u5bc6\u901a\u9053\u672a\u5efa\u7acb\u524d\uff0c\u5728\u4e0d\u5b89\u5168\u7684\u901a\u9053\u4e0b\u5efa\u7acb\u4e00\u500b\u5bc6\u9470\uff0c\u53ef\u4ee5\u7528\u9019\u500b\u5bc6\u9470\uff0c\u9032\u884c\u7b2c1\u6b21\u6191\u8b49\u4ea4\u63db\u6642\uff0c\u52a0\u5bc6\u4f7f\u7528\u3002\u9019\u500b\u5bc6\u9470\u53ea\u4f7f\u7528\u4e00\u6b21\uff0c\u7528\u5b8c\u4e86\u5c31\u4e1f\uff0c\u4e0b\u6b21\u8981\u7528\u6642\uff0c\u6703\u518d\u91cd\u65b0\u7522\u751f\u3002<\/p>\n

\u4f7f\u7528build-dh \u9019\u500bScript \u4f86\u5efa\u7acbDH paras\u3002<\/p>\n


\n[root@openvpn ~]#.\/build-dh
\nGenerating DH parameters, 2048 bit long safe prime, generator 2
\nThis is going to take a long time
\n...............................................++*++*
\n<\/code><\/p><\/blockquote>\n

\u597d\u5566\uff0c\u76ee\u524d\u6211\u5011\u8981\u7684Key \u90fd\u6709\u4e86\uff0c\u5b58\u5728\/etc\/openvpn\/easy-rsa\/2.0\/keys\uff0c\u505a\u4e00\u500b\u5217\u8868\u5982\u4e0b\uff1a<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Filename<\/strong><\/td>\nNeeded By<\/strong><\/td>\nPurpose<\/strong><\/td>\nSecret<\/strong><\/td>\n<\/tr>\n
ca.crt<\/td>\nserver + all clients<\/td>\nRoot CA certificate<\/td>\nNO<\/td>\n<\/tr>\n
ca.key<\/td>\nkey signing machine only<\/td>\nRoot CA key<\/td>\nYES<\/td>\n<\/tr>\n
dh2048.pem<\/td>\nserver only<\/td>\nDiffie Hellman parameters<\/td>\nNO<\/td>\n<\/tr>\n
server.crt<\/td>\nserver only<\/td>\nServer Certificate<\/td>\nNO<\/td>\n<\/tr>\n
server.key<\/td>\nserver only<\/td>\nServer Key<\/td>\nYES<\/td>\n<\/tr>\n
client1.crt<\/td>\nclient1 only<\/td>\nClient1 Certificate<\/td>\nNO<\/td>\n<\/tr>\n
client1.key<\/td>\nclient1 only<\/td>\nClient1 Key<\/td>\nYES<\/td>\n<\/tr>\n
client2.crt<\/td>\nclient2 only<\/td>\nClient2 Certificate<\/td>\nNO<\/td>\n<\/tr>\n
client2.key<\/td>\nclient2 only<\/td>\nClient2 Key<\/td>\nYES<\/td>\n<\/tr>\n
client3.crt<\/td>\nclient3 only<\/td>\nClient3 Certificate<\/td>\nNO<\/td>\n<\/tr>\n
client3.key<\/td>\nclient3 only<\/td>\nClient3 Key<\/td>\nYES<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Secret \u70baYes \u5c31\u662f\u8981\u4fdd\u5bc6\u7684\u79c1\u9470\uff0cNO \u7684\u5c31\u662f\u53ef\u4ee5\u516c\u958b\uff0c\u5230\u8655\u6563\u64ad\u7684\u516c\u9470\u3002\u7576\u7136Client\u8981\u7528\u7684\uff0c\u5c31\u53ea\u7d66\u90a3\u500bUser \uff0c\u53ef\u4ee5\u900f\u904eSSL \u52a0\u5bc6\u7684\u65b9\u5f0f\uff0c\u4f7f\u7528\u7db2\u969b\u7db2\u8def\u4f86\u50b3\u9001\u7d66User \uff0c\u5982\u4f55\u4f7f\u7528SSL \u52a0\u5bc6\u7684\u901a\u8a0a\u670d\u52d9\uff0c\u8acb\u53c3\u8003\u9019\u7bc7 \u5404\u9805\u7db2\u8def\u670d\u52d9 + SSL \u61c9\u7528<\/a>\u3002<\/p>\n

\u5982\u679c\u4e0d\u60f3\u4f7f\u7528\u5b89\u5168\u7684\u901a\u9053\uff0c\u50b3\u9001\u9019\u4e9b\u516c\u9470\u53ca\u79c1\u9470\uff0c\u9084\u6709\u4ec0\u9ebc\u65b9\u5f0f\u5462\uff1f<\/p>\n

\u6709\u7684\u3002\u5728\u6211\u5011\u7684\u6e2c\u8a66\u4e2d\uff0c\u90fd\u662f\u5728\u540c\u4e00\u53f0\u6a5f\u5668\u4e0a\uff0c\u7522\u751fclient\u7aef\u7684\u516c\u9470\u53ca\u79c1\u9470\u3002\u53ef\u4ee5\u6539\u70ba\u7531User \u5728\u81ea\u5df1\u6a5f\u5668\u4e0a\uff0c\u7522\u751f\u81ea\u5df1\u7684\u79c1\u9470\uff0c\u518d\u63d0\u4ea4\u4e00\u500b\u6191\u8b49\u7c3d\u540d\u7684\u8acb\u6c42(CSR)\uff0c\u9001\u81f3\u5c08\u9580\u505a\u7c3d\u767c\u6191\u8b49\u7684\u6a5f\u5668\u4e0a\uff0c\u518d\u7531\u7c3d\u767c\u6191\u8b49\u7684\u6a5f\u5668\uff0c\u57f7\u884c\u7c3d\u767c\u4f5c\u696d\uff0c\u518d\u628a\u7c3d\u597d\u7684\u6191\u8b49\uff0c\u56de\u8986\u7d66\u4f7f\u7528\u8005\u3002\u9019\u6a23\u7684\u4f5c\u6cd5\uff0cuser\u7684\u79c1\u9470\uff0c\u5c31\u4e0d\u6703\u96e2\u958buser\u81ea\u5df1\u7684\u6a5f\u5668\uff0c\u4e5f\u5c31\u4e0d\u9700\u8981\u4f7f\u7528\u52a0\u5bc6\u901a\u9053\uff0c\u4f86\u50b3\u9001\u79c1\u9470\uff01<\/p>\n

\u641e\u5b9a\u4e86CA \u6191\u8b49 \u4e4b\u5f8c\uff0c\u63a5\u8457\u5c31\u53ef\u4ee5\u9032\u884cOpenVPN Server \u53caClient \u7aef\u7684\u8a2d\u5b9a\u4e86\uff0c\u4e0d\u597d\u610f\u601d\uff0c\u53c8\u8981\u5f85\u7e8c\u56c9\uff01<\/p>\n

OpenVPN \u5efa\u7f6e\u7b46\u8a18(\u7b2c5\u96c6)<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

\u672c\u96c6\u91cd\u9ede\u5728\u8a2d\u5b9aCertificate Authority (CA) \u3002\u8981\u9032\u5165\u8a2d\u5b9aOpenVPN\u7684\u7b2c\u4e00\u6b65\u662f\uff0c\u5efa\u7acb […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[23,24],"tags":[124,125,72,123,29,126,28],"class_list":["post-941","post","type-post","status-publish","format-standard","hentry","category-mistech","category-mistech-net","tag-dh-paras","tag-diffie-hellman","tag-open-vpn","tag-openvpn","tag-root-ca","tag-ssl","tag-28"],"_links":{"self":[{"href":"https:\/\/blog.nuface.tw\/index.php?rest_route=\/wp\/v2\/posts\/941","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.nuface.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.nuface.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.nuface.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.nuface.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=941"}],"version-history":[{"count":41,"href":"https:\/\/blog.nuface.tw\/index.php?rest_route=\/wp\/v2\/posts\/941\/revisions"}],"predecessor-version":[{"id":1924,"href":"https:\/\/blog.nuface.tw\/index.php?rest_route=\/wp\/v2\/posts\/941\/revisions\/1924"}],"wp:attachment":[{"href":"https:\/\/blog.nuface.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=941"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.nuface.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=941"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.nuface.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=941"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}