Revision [4070]
Last edited on 2011-07-18 22:56:32 by KenFongAdditions:
http://linuxconfig.org/vpn-virtual-private-network-and-openvpn
Revision [3704]
Edited on 2010-04-28 09:22:45 by KenFongAdditions:
====Source install====
====Certificate====
Clean up
cd /usr/share/doc/openvpn/easy-rsa
source vars
sh clean-all
Build ca
sh build-ca
Build server
sh build-key-server server
Build client(s)
sh build-key client1
Build dh
sh build-dh
Generated files will be under the keys directory.
====Config files====
====Certificate====
Clean up
cd /usr/share/doc/openvpn/easy-rsa
source vars
sh clean-all
Build ca
sh build-ca
Build server
sh build-key-server server
Build client(s)
sh build-key client1
Build dh
sh build-dh
Generated files will be under the keys directory.
====Config files====
Deletions:
Certificate
1. Build ca
2. Build server
3. Build client(s)
4. Build dh
Revision [3703]
Edited on 2010-04-28 09:17:14 by KenFongAdditions:
Certificate
1. Build ca
2. Build server
3. Build client(s)
4. Build dh
server.conf
port 1234
proto tcp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key # This file should be kept secret
dh /etc/openvpn/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-to-client
keepalive 10 120
cipher DES-EDE3-CBC # Triple-DES
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log /var/log/openvpn.log
verb 3
tun-mtu 1400 # this is just for me
client.conf
client
dev tun
proto tcp
remote vpngw.domain.tld 1234
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
cipher DES-EDE3-CBC
comp-lzo
verb 3
tun-mtu 1400
1. Build ca
2. Build server
3. Build client(s)
4. Build dh
server.conf
port 1234
proto tcp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key # This file should be kept secret
dh /etc/openvpn/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-to-client
keepalive 10 120
cipher DES-EDE3-CBC # Triple-DES
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
log /var/log/openvpn.log
verb 3
tun-mtu 1400 # this is just for me
client.conf
client
dev tun
proto tcp
remote vpngw.domain.tld 1234
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
cipher DES-EDE3-CBC
comp-lzo
verb 3
tun-mtu 1400