Add new attachment

Only authorized users are allowed to upload new attachments.

This page (revision-3) was last changed on 14-Apr-2010 14:30 by Davide Raschetti  

This page was created on 14-Apr-2010 14:30 by Administrator

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Difference between version and

At line 1 added 58 lines
!creazione chiave statica:
cd /etc/openvpn
openvpn --genkey --secret file.key
# Generazione della Static Key
!modifica variabili path
. vars
che si trova in /usr/shre/doc .....easy-rsa
noi mettiamo le chiavi in /etc/openvpn/keys quindi il file vars va modificato di conseguenza
!creazione CA
OCCHIO DI DEFAULT LUI CREA CA ...noi invece mettiamo suffisso il nome cliente (es. per bregaglio CABRE??!?!?)
modifico /usr/share/doc/packages/openvpn/easy-rsa/openssl.cnf
. ./vars
./clean-all
./build-ca
Alla richesta common name rispondere con la ragione sociale su cui installato (es telnext)
!Creazione certificato server
. build-key-server server
in common name mettere il nome del server (es diabolik)
!Creazione certificato client
. build-key client
dove client è il nome utente (es. rasco)
!creazione parametri DH
. build-dh
!configurazione server
da mettere in /etc/openvpn
%%prettify
{{{
-------------server.conf----------------------
float
port 1194
proto udp
user nobody
group nobody
dev tun
server 192.168.200.0 255.255.255.0
push "route 10.1.1.0 255.255.255.0"
tls-server
#tls-auth /etc/openvpn/keys/fweta.key 0
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/fweta.crt
key /etc/openvpn/keys/fweta.key
dh /etc/openvpn/keys/dh1024.pem
cipher BF-CBC
keysize 128
#comp-lzo
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
verb 4
log-append /var/log/openvpn.log
----------------------------------------------
}}}
Version Date Modified Size Author Changes ... Change note
3 14-Apr-2010 14:30 1.612 kB Davide Raschetti to previous
2 14-Apr-2010 14:30 1.569 kB Administrator to previous | to last
1 14-Apr-2010 14:30 0.125 kB Administrator to last
« This page (revision-3) was last changed on 14-Apr-2010 14:30 by Davide Raschetti