OpenVPN - Revision history

M: /* Client */

2023-03-20T20:09:44Z

Client

← Older revision		Revision as of 20:09, 20 March 2023
Line 1:		Line 1:
	== Client ==		== Client ==
	Just use the Network Manager applet to connect using *.~~openvpn~~ files.		Just use the Network Manager applet to connect using *.ovpn files.
			NM applet > Edit Connections > + > (dropdown) > Import a saved VPN connection...
			It will prompt for the *.ovpn file. Then you can select to connect to it from the applet.

	== Server ==		== Server ==

2023-03-20T20:03:32Z

← Older revision		Revision as of 20:03, 20 March 2023
Line 1:		Line 1:
			== Client ==
			Just use the Network Manager applet to connect using *.openvpn files.

			== Server ==
	=== Usage ===		=== Usage ===
	==== Start client connection ====		==== Start client connection ====

2022-02-22T16:30:00Z

Make a client key

← Older revision		Revision as of 16:30, 22 February 2022
Line 51:		Line 51:
	sudo ./make_config.sh mbm-client		sudo ./make_config.sh mbm-client

	~~# the~~ key: ~/client-configs/files/mbm-client.opvn		The key will be in ~/client-configs/files/mbm-client.opvn. It should be securely delivered to the user so they can import it into their vpn client.

	=== Install ===		=== Install ===

2022-02-22T16:12:29Z

Build a base client config

2022-02-22T16:11:44Z

Build a base client config

← Older revision		Revision as of 16:11, 22 February 2022
Line 137:		Line 137:

	===== Build a base client config =====		===== Build a base client config =====
			cd ~/client-configs
			mkdir -p files
			cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf base.conf
			emacs base.conf

			Contents to change:
			remote myvpnhost.com 1290

			user nobody
			group nogroup

			#ca ca.crt
			#cert client.crt
			#key client.key

			#tls-auth ta.key 1

			cipher AES-256-GCM

			key-direction 1

			script-security 2
			up /etc/openvpn/update-resolv-conf
			down /etc/openvpn/update-resolv-conf

	===== Set up opvn generation script =====		===== Set up opvn generation script =====

2022-02-22T16:01:25Z

Set up initial certs and keys

← Older revision		Revision as of 16:01, 22 February 2022
Line 134:		Line 134:
	sudo cp /etc/openvpn/ca.crt ~/client-configs/keys/		sudo cp /etc/openvpn/ca.crt ~/client-configs/keys/

	Set up ~~this~~ helper script to build a single opvn file from the bits:		==== Set up for client key generation ====

			===== Build a base client config =====

			===== Set up opvn generation script =====
			Set up a helper script to build a single opvn file from the bits:
	emacs ~/client-configs/make_config.sh		emacs ~/client-configs/make_config.sh
	chmod +x ~/client-configs/make_config.sh		chmod +x ~/client-configs/make_config.sh

2022-02-22T15:49:34Z

Set up initial certs and keys

← Older revision		Revision as of 15:49, 22 February 2022
Line 143:		Line 143:
	# First argument: Client identifier		# First argument: Client identifier

	KEY_DIR=$~~HOME~~/client-configs/keys		MYHOME=/home/esauto
	OUTPUT_DIR=$~~HOME~~/client-configs/files		KEY_DIR=$MYHOME/client-configs/keys
	BASE_CONFIG=$~~HOME~~/client-configs/base.conf		OUTPUT_DIR=$MYHOME/client-configs/files
			BASE_CONFIG=$MYHOME/client-configs/base.conf

	cat ${BASE_CONFIG} \		cat ${BASE_CONFIG} \

2022-02-22T15:46:14Z

Configure networking

← Older revision		Revision as of 15:46, 22 February 2022
Line 205:		Line 205:
	sudo systemctl status openvpn@server # if ok, we will "enable" to run on startup		sudo systemctl status openvpn@server # if ok, we will "enable" to run on startup
	sudo systemctl enable openvpn@server		sudo systemctl enable openvpn@server

			Punch a hole in your OpenVPN host firewall on your selected port and protocol (UDP/TCP).

	===== Set up iptables routing =====		===== Set up iptables routing =====

2022-02-22T15:44:47Z

Make a client key

← Older revision		Revision as of 15:44, 22 February 2022
Line 46:		Line 46:

	# FROM OPENVPN		# FROM OPENVPN
	cd ~/client-configs~~/keys/~~		cd ~/client-configs
	emacs mbm-client.crt # paste		emacs keys/mbm-client.crt # paste
	# pull all the keys/conf into one .opvn file		# pull all the keys/conf into one .opvn file
	~~cd ..~~
	sudo ./make_config.sh mbm-client		sudo ./make_config.sh mbm-client

2022-02-22T15:42:33Z

Set up initial certs and keys

← Older revision		Revision as of 15:42, 22 February 2022
Line 137:		Line 137:
	Set up this helper script to build a single opvn file from the bits:		Set up this helper script to build a single opvn file from the bits:
	emacs ~/client-configs/make_config.sh		emacs ~/client-configs/make_config.sh
			chmod +x ~/client-configs/make_config.sh

			Contents:
	#!/bin/bash		#!/bin/bash