http://vikipranata.is-a.dev/tags/vpn/ Recent content in Vpn on Viki Pranata Hugo -- 0.146.0 en Wed, 04 Sep 2024 09:00:00 +0700 http://vikipranata.is-a.dev/posts/linux-openvpn-server/ Wed, 04 Sep 2024 09:00:00 +0700 http://vikipranata.is-a.dev/posts/linux-openvpn-server/ <h2 id="installing-package-dependencies"><em>Installing package dependencies</em></h2> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">dnf install -y epel-release </span></span><span class="line"><span class="cl">dnf install -y openvpn openssl easy-rsa policycoreutils-python-utils  </span></span></code></pre></div><h2 id="creating-and-setting-up-an-openvpn-server-certificates"><em>Creating and Setting Up an OpenVPN Server Certificates</em></h2> <p>Set of environment variable for easy_rsa</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">cat <span class="s">&lt;&lt;EOF | tee vars </span></span></span><span class="line"><span class="cl"><span class="s">set_var EASYRSA_ALGO ec </span></span></span><span class="line"><span class="cl"><span class="s">set_var EASYRSA_CURVE prime256v1 </span></span></span><span class="line"><span class="cl"><span class="s">set_var EASYRSA_CA_EXPIRE 3650 </span></span></span><span class="line"><span class="cl"><span class="s">set_var EASYRSA_CERT_EXPIRE 3650 </span></span></span><span class="line"><span class="cl"><span class="s">set_var EASYRSA_CRL_DAYS 3650 </span></span></span><span class="line"><span class="cl"><span class="s">EOF</span> </span></span></code></pre></div><p>Then execute <code>./easyresa init-pki</code><br> <img alt="init-pki" loading="lazy" src="http://vikipranata.is-a.dev/posts/linux-openvpn-server/uploads/init-pki.webp"></p> <p>Create certificate authority (CA) and sever certificate.</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl"><span class="nv">SERVER_CN</span><span class="o">=</span>jumpserver </span></span><span class="line"><span class="cl"><span class="nv">SERVER_NAME</span><span class="o">=</span>jumpserver </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl">./easyrsa --batch --req-cn<span class="o">=</span><span class="s2">&#34;</span><span class="nv">$SERVER_CN</span><span class="s2">&#34;</span> build-ca nopass </span></span><span class="line"><span class="cl">./easyrsa --batch build-server-full <span class="s2">&#34;</span><span class="nv">$SERVER_NAME</span><span class="s2">&#34;</span> nopass </span></span><span class="line"><span class="cl">./easyrsa gen-crl </span></span></code></pre></div><p><img alt="create-ca-cert" loading="lazy" src="http://vikipranata.is-a.dev/posts/linux-openvpn-server/uploads/create-ca-cert.webp"></p>