first commit
This commit is contained in:
56
VPN.md
Executable file
56
VPN.md
Executable file
@@ -0,0 +1,56 @@
|
||||
|
||||
## Renew Server Key
|
||||
In CA Server
|
||||
```
|
||||
cd ~/EasyRSA-3.0.4/
|
||||
sudo ./easyrsa gen-crl
|
||||
sudo cp /home/causr/EasyRSA-3.0.4/pki/crl.pem /etc/openvpn/crl.pem
|
||||
```
|
||||
Restart vpnserver
|
||||
```
|
||||
sudo systemctl restart openvpn.service
|
||||
sudo systemctl status openvpn.service
|
||||
|
||||
```
|
||||
## Generate client key
|
||||
|
||||
In VPN Server
|
||||
```
|
||||
cd ~/EasyRSA-3.0.4/
|
||||
./easyrsa gen-req client1 nopass
|
||||
cp pki/private/client1.key ~/client-configs/keys/
|
||||
scp pki/reqs/client1.req causr@ca_ip:/tmp
|
||||
|
||||
```
|
||||
|
||||
|
||||
In CA Server
|
||||
```
|
||||
cd ~/EasyRSA-3.0.4/
|
||||
./easyrsa import-req /tmp/client1.req client1
|
||||
./easyrsa sign-req client client1
|
||||
scp pki/issued/client1.crt sammy@your_server_ip:/tmp
|
||||
```
|
||||
|
||||
In VPN Server
|
||||
```
|
||||
cp /tmp/client1.crt ~/client-configs/keys/
|
||||
cd ~/client-configs
|
||||
sudo ./make_config.sh client1
|
||||
|
||||
```
|
||||
|
||||
## Revoking Client Certificates
|
||||
In CA Server
|
||||
```
|
||||
cd ~/EasyRSA-3.0.4/
|
||||
./easyrsa revoke client2
|
||||
|
||||
```
|
||||
|
||||
## Install VPN manager in client for Ubuntu 18
|
||||
```
|
||||
sudo apt install network-manager-openvpn-gnome
|
||||
```
|
||||
|
||||
https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-ubuntu-18-04
|
||||
Reference in New Issue
Block a user