http://vikipranata.is-a.dev/id/idtags/vpn/ Recent content in IDtags/Vpn on Viki Pranata Hugo -- 0.146.0 id Wed, 04 Sep 2024 09:00:00 +0700 http://vikipranata.is-a.dev/id/posts/linux-openvpn-server/ Wed, 04 Sep 2024 09:00:00 +0700 http://vikipranata.is-a.dev/id/posts/linux-openvpn-server/ <h2 id="instalasi-paket-dependensi"><em>Instalasi Paket Dependensi</em></h2> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">dnf install -y epel-release </span></span><span class="line"><span class="cl">dnf install -y openvpn openssl easy-rsa policycoreutils-python-utils  </span></span></code></pre></div><h2 id="membuat-dan-menyiapkan-sertifikat-server-openvpn"><em>Membuat dan Menyiapkan Sertifikat Server OpenVPN</em></h2> <p>Set variabel environment untuk easy_rsa</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">cat <span class="s">&lt;&lt;EOF | tee vars </span></span></span><span class="line"><span class="cl"><span class="s">set_var EASYRSA_ALGO ec </span></span></span><span class="line"><span class="cl"><span class="s">set_var EASYRSA_CURVE prime256v1 </span></span></span><span class="line"><span class="cl"><span class="s">set_var EASYRSA_CA_EXPIRE 3650 </span></span></span><span class="line"><span class="cl"><span class="s">set_var EASYRSA_CERT_EXPIRE 3650 </span></span></span><span class="line"><span class="cl"><span class="s">set_var EASYRSA_CRL_DAYS 3650 </span></span></span><span class="line"><span class="cl"><span class="s">EOF</span> </span></span></code></pre></div><p>Kemudian jalankan <code>./easyresa init-pki</code><br> <img alt="init-pki" loading="lazy" src="http://vikipranata.is-a.dev/posts/linux-openvpn-server/uploads/init-pki.webp"></p> <p>Buat certificate authority (CA) dan sertifikat server.</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl"><span class="nv">SERVER_CN</span><span class="o">=</span>jumpserver </span></span><span class="line"><span class="cl"><span class="nv">SERVER_NAME</span><span class="o">=</span>jumpserver </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl">./easyrsa --batch --req-cn<span class="o">=</span><span class="s2">&#34;</span><span class="nv">$SERVER_CN</span><span class="s2">&#34;</span> build-ca nopass </span></span><span class="line"><span class="cl">./easyrsa --batch build-server-full <span class="s2">&#34;</span><span class="nv">$SERVER_NAME</span><span class="s2">&#34;</span> nopass </span></span><span class="line"><span class="cl">./easyrsa gen-crl </span></span></code></pre></div><p><img alt="create-ca-cert" loading="lazy" src="http://vikipranata.is-a.dev/posts/linux-openvpn-server/uploads/create-ca-cert.webp"></p>