User Tools

Site Tools


wiki:openvpn_installation

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Next revisionBoth sides next revision
wiki:openvpn_installation [2024/04/10 11:33] – [References] add openssl x509v3_config config link antisawiki:openvpn_installation [2024/04/10 12:48] – add section about systemd service antisa
Line 91: Line 91:
   ./easyrsa sign-req server server   ./easyrsa sign-req server server
      
-3. Create client signing request and certificate. Change EntityName, ''nopass'' if you don't want private key to be encrypted+4. Create client signing request and certificate. Change EntityName, ''nopass'' if you don't want private key to be encrypted
   ./easyrsa gen-req EntityName nopass   ./easyrsa gen-req EntityName nopass
   ./easyrsa sign-req client EntityName   ./easyrsa sign-req client EntityName
Line 98: Line 98:
   ./easyrsa gen-dh   ./easyrsa gen-dh
      
-For each new client just repeat step 3.+For each new client just repeat step 4.
  
 ==== Creating configuration files for server and clients ==== ==== Creating configuration files for server and clients ====
Line 184: Line 184:
  
   iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE   iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
-  + 
 +===== Running openvpn server as a service ===== 
 + 
 +Debian 12 ships with systemd units for this. The way to run it is to first make sure the server configuration file is located in ///etc/openvpn/server// directory. The file must end with .conf. So if you have a configuration file called ''myvpnserver.conf'' you need to run it as 
 + 
 +  systemctl enable --now openvpn-server@myvpnserver 
 + 
 +Check logs with 
 +  journalctl -xefu openvpn-server@server.service 
 ====== Tested on ====== ====== Tested on ======
   * Debian 12 Bookworw   * Debian 12 Bookworw
wiki/openvpn_installation.txt · Last modified: 2024/05/13 16:18 by antisa

Except where otherwise noted, content on this wiki is licensed under the following license: CC0 1.0 Universal
CC0 1.0 Universal Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki