OpenVPN Installation - Revision history

R00t at 02:21, 10 January 2017

2017-01-10T02:21:26Z

R00t at 02:16, 10 January 2017

2017-01-10T02:16:13Z

R00t at 08:28, 3 January 2017

2017-01-03T08:28:43Z

R00t at 08:02, 3 January 2017

2017-01-03T08:02:29Z

R00t at 07:16, 3 January 2017

2017-01-03T07:16:05Z

R00t at 04:04, 1 February 2016

2016-02-01T04:04:08Z

R00t: Created page with "Reference: https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-14-04 ==Install OpenVPN & Easy RSA== ~$ sudo apt-get update && s..."

2016-02-01T04:03:39Z

Created page with "Reference: https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-14-04 ==Install OpenVPN & Easy RSA== <nowiki>~$ sudo apt-get update && s..."

New page

Reference: https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-14-04
==Install OpenVPN & Easy RSA==
<nowiki>~$ sudo apt-get update && sudo apt-get install -y openvpn easy-rsa</nowiki>

@@ Line 56: / Line 56: @@
 Build client certificate and key.  Easy client should have unique certs and keys.
   <nowiki>~$ cd /etc/openvpn/easy-rsa
-./build-key client1</nowiki>
+../build-key client1</nowiki>

@@ Line 43: / Line 43: @@
 . . .
 export KEY_CN=openvpn.example.com</nowiki>
-Begin creation of certificates
+Begin creation of certificates.  You '''must''' be root.
-  <nowiki>~$ cd /etc/openvpn/easy-rsa
+  <nowiki>~$ sudo -s
 source ./vars
 ./clean-all

@@ Line 30: / Line 30: @@
 ==Generate Keys and Certs==
 Create directory and copy files
   <nowiki>~$ sudo mkdir -p /etc/openvpn/easy-rsa/keys
@@ Line 36: / Line 38: @@
   <nowiki>~$ sudo vi /etc/openvpn/easy-rsa/vars
 ...
 # X509 Subject Field
@@ Line 50: / Line 43: @@
 . . .
 export KEY_CN=openvpn.example.com</nowiki>

← Older revision		Revision as of 08:02, 3 January 2017
Line 12:		Line 12:
	Copy example server.conf to openvpn parent dir.		Copy example server.conf to openvpn parent dir.
	<nowiki>~$ sudo cp /usr/share/doc/openvpn-2.3.14/sample/sample-config-files/server.conf /etc/openvpn/</nowiki>		<nowiki>~$ sudo cp /usr/share/doc/openvpn-2.3.14/sample/sample-config-files/server.conf /etc/openvpn/</nowiki>
		+	Edit the config
		+	<nowiki>~$ sudo vi /etc/openvpn/server.conf
		+	Comments can be preceded by either # or ;
		+
		+	# change to 2048
		+	dh dh2048.pem
		+
		+	# redirect ALL traffic - remove ;
		+	push "redirect-gateway def1 bypass-dhcp"
		+
		+	# specify local DNS server(s) - remove ; and update DNS server ip address
		+	push "dhcp-option DNS 10.0.1.2"
		+
		+	# start openvpn with no priviledges - uncomment lines
		+	user nobody
		+	group nobody
		+
		+	==Generate Keys and Certs==
		+	Create directory and copy files
		+	<nowiki>~$ sudo mkdir -p /etc/openvpn/easy-rsa/keys
		+	~$ sudo cp -rf /usr/share/easy-rsa/2.0/* /etc/openvpn/easy-rsa/</nowiki>
		+	Update Config
		+	<nowiki>~$ sudo vi /etc/openvpn/easy-rsa/vars
		+	...
		+	# These are the default values for fields
		+	# which will be placed in the certificate.
		+	# Don't leave any of these fields blank.
		+	export KEY_COUNTRY="US"
		+	export KEY_PROVINCE="NY"
		+	export KEY_CITY="New York"
		+	export KEY_ORG="DigitalOcean"
		+	export KEY_EMAIL="sammy@example.com"
		+	export KEY_OU="Community"
		+
		+	# X509 Subject Field
		+	export KEY_NAME="server"
		+	. . .
		+	export KEY_CN=openvpn.example.com</nowiki>

@@ Line 1: / Line 1: @@
-Reference: https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-14-04<br>
+Reference: [https://www.digitalocean.com/community/tutorials/how-to-setup-and-configure-an-openvpn-server-on-centos-7 https://www.digitalocean.com/community/tutorials/how-to-setup-and-configure-an-openvpn-server-on-centos-7]<br>
-Installation performed on Ubuntu 14.04 Server instance.
+Installation performed on Oracle Linux 7.3 x64 Server instance.
-==Install OpenVPN & Easy RSA==
+==Install OpenVPN and Easy-RSA==
-  <nowiki>~$ sudo apt-get update && sudo apt-get install -y openvpn easy-rsa</nowiki>
+Install EPEL repo