Difference between revisions of "Openvpn"

Latest revision as of 16:24, 18 March 2015

Installing an OpenVPN client:

Usually, the easiest way to install an OpenVPN client is to use the package management system for your particular Linux distribution. Run one of the following commands (as root):

Fedora/CentOS/RedHat:

yum install openvpn

NOTE: OpenVPN Access Server is not compatible with any version below the 2.1 OpenVPN Community/Linux client!

Ubuntu/Debian:

apt-get install openvpn

Once the openvpn package is fetched from the Internet and installed, run the client with the --version argument to make sure that it is version 2.1:

openvpn --version
OpenVPN 2.1_rc15e x86_64-unknown-linux-gnu [...]
[...]

Running the OpenVPN client with the downloaded client config file: Usually, the easiest way to install an OpenVPN client is to use the --config argument to specify the location of the downloaded client config file:

openvpn --config client.ovpn

Hadoop System for Lyman Phun

we need the following files in directory for openvpn to use

ca.crt:

client.conf

client
dev tun
proto udp

remote 64.169.30.57 1194

resolv-retry infinite
nobind
persist-key
persist-tun

ca ca.crt
cert client.crt
key client.key
ns-cert-type server

comp-lzo
verb 3

remote-cert-tls server
auth-user-pass

client.crt

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=CA, L=SanJose, O=SMCSRV, CN=smcsrv/name=SMC Server
        Validity
            Not Before: Mar  6 17:48:16 2015 GMT
            Not After : Apr  5 17:48:16 2015 GMT
        Subject: C=US, ST=CA, L=SanJose, O=SMCSRV, CN=smuk1/name=one supermicrouk/emailAddress=edwinb@supermico.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:a6:86:06:b7:a1:30:19:1a:5b:26:8c:5b:9c:e2:
                    15:59:b7:38:93:8e:60:9e:1d:e5:bc:30:2e:10:06:
                    91:7d:6c:9c:78:2a:dc:7a:18:4f:ca:48:6f:5c:bf:
                    a7:69:67:1d:9d:94:a3:75:39:f8:14:1e:c3:9a:33:
                    90:8a:f7:de:91:59:f9:3b:67:aa:05:f8:0d:80:fe:
                    0e:43:1f:fd:a1:f9:f1:57:01:72:36:bc:40:29:2c:
                    07:52:e8:bd:1c:42:d6:89:67:44:85:f7:0d:af:8f:
                    b8:44:c4:f5:b5:30:99:1c:2a:90:c2:75:76:70:96:
                    ca:23:c8:12:ed:59:e3:2e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Comment: 
                Easy-RSA Generated Certificate
            X509v3 Subject Key Identifier: 
                F3:EC:B5:7B:A4:B2:6D:57:4E:D0:A4:F9:54:B4:9A:92:2F:60:A7:44
            X509v3 Authority Key Identifier: 
                keyid:AA:B9:7B:53:78:D1:3B:DD:82:63:BE:B1:7D:09:B5:5D:5E:E4:A9:76
                DirName:/C=US/ST=CA/L=SanJose/O=SMCSRV/CN=smcsrv/name=SMC Server
                serial:B3:0C:FB:E4:5C:42:AC:42

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication
            X509v3 Key Usage: 
                Digital Signature
    Signature Algorithm: sha1WithRSAEncryption
        43:28:ff:c6:02:05:ed:02:3e:d8:13:6b:98:9d:7b:4d:3d:dd:
        40:10:2e:78:86:c4:46:a6:d0:42:b4:ce:c6:ed:47:e3:66:c2:
        af:23:3e:8f:c6:51:b6:99:c0:18:69:5b:f1:06:1f:92:3a:e4:
        76:c0:36:bb:21:38:85:a2:fb:74:7b:16:56:24:ad:c0:fa:78:
        6a:04:ba:ee:4c:b0:33:15:e9:24:49:e1:91:61:90:ad:9d:bc:
        d4:02:3b:f0:bf:73:e6:aa:4f:4c:6a:64:99:77:ff:04:5b:4a:
        de:e1:df:c2:3c:fa:39:b1:6a:ad:50:e8:41:3b:4d:d1:34:83:
        4e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

client.key

@@ Line 2: / Line 2: @@
 Usually, the easiest way to install an OpenVPN client is to use the package management system for your particular Linux distribution.  Run one of the following commands (as root):
-Fedora/CentOS/RedHat:
+====Fedora/CentOS/RedHat:====
 <syntaxhighlight>
 yum install openvpn
@@ Line 25: / Line 25: @@
 ===Hadoop System for Lyman Phun ===
-. we need the following files in directory:
+ we need the following files in directory for openvpn to use
 ====ca.crt:====
+<syntaxhighlight>
 -----BEGIN CERTIFICATE-----
 MIIDDTCCAnagAwIBAgIJALMM++RcQqxCMA0GCSqGSIb3DQEBBQUAMGMxCzAJBgNV
@@ Line 46: / Line 47: @@
 b8NliLTZ/Dq6cqihWdwdKF8=
 -----END CERTIFICATE-----
+</syntaxhighlight>
 ====client.conf====
+<syntaxhighlight>
 client
 dev tun
@@ Line 68: / Line 71: @@
 remote-cert-tls server
 auth-user-pass
+</syntaxhighlight>
 ====client.crt====
+<syntaxhighlight>
 Certificate:
      Data:
@@ Line 139: / Line 144: @@
 Ajvwv3Pmqk9MamSZd/8EW0re4d/CPPo5sWqtUOhBO03RNINOTA==
 -----END CERTIFICATE-----
+</syntaxhighlight>
 ====client.key====
+<syntaxhighlight>
 -----BEGIN PRIVATE KEY-----
 MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBAKaGBrehMBkaWyaM
@@ Line 156: / Line 163: @@
 G6WP7EPsGNnTkA==
 -----END PRIVATE KEY-----
+</syntaxhighlight>