OPENVPN with User-Authentication: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
(→Client) |
|||
| Zeile 44: | Zeile 44: | ||
username-as-common-name | username-as-common-name | ||
plugin /usr/lib/x86_64-linux-gnu/openvpn/plugins/openvpn-plugin-auth-pam.so /etc/pam.d/login | plugin /usr/lib/x86_64-linux-gnu/openvpn/plugins/openvpn-plugin-auth-pam.so /etc/pam.d/login | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
</pre> | </pre> | ||
Version vom 7. September 2022, 09:14 Uhr
Install
- sudo apt install openvpn
Server
Create DH Key
- cd /etc/openvpn
- openssl dhparam -out dh2048.pem 2048
Selbstsigniertes Zertifikat
- Selbstsigniertes Zertifikat
- Zertifikat der Zertifizierungsstelle
/etc/openvpn/ca.crt
- Zertifikat des Servers
/etc/openvpn/frieda.xx.de.crt
- Privater Schlüssel des Servers
/etc/openvpn/frieda.xx.de.key
Server Config
- vi /etc/openvpn/server.conf
dev tun mode server tls-server port 5000 topology subnet server 172.31.2.0 255.255.255.0 push "route 10.82.228.0 255.255.255.0" push "dhcp-option DOMAIN xx.de" push "dhcp-option DNS 8.8.8.8" cipher AES-256-CBC link-mtu 1542 status /tmp/cool-vpn.status keepalive 10 30 client-to-client max-clients 150 verb 3 dh /etc/openvpn/dh2048.pem ca /etc/openvpn/ca.crt cert /etc/openvpn/frieda.xx.de.crt key /etc/openvpn/frieda.xx.de.key verify-client-cert none compress persist-key persist-tun client-config-dir client username-as-common-name plugin /usr/lib/x86_64-linux-gnu/openvpn/plugins/openvpn-plugin-auth-pam.so /etc/pam.d/login