Per il formato del file dei client un po per comodità un po per voglia di provare anche su macchine linux ho scelto l’unified format.
Unica differenza per le macchine Linux l’estensione deve essere .conf e non .ovpn

client
dev tun
proto tcp

remote vpn.myfirm.com 777
remote vpn1.myfirm.com 777
resolv-retry 60
nobind
;topology subnet
persist-key
persist-tun

#ca      /etc/openvpn/client/pc0/ca.crt
#cert    /etc/openvpn/client/pc0/clientmio.crt
#key     /etc/openvpn/client/pc0/clientmio.key

remote-cert-tls server
tls-crypt /etc/openvpn/client/pc0/ta.key 1
cipher AES-256-CBC
data-ciphers AES-256-CBC
data-ciphers-fallback AES-256-CBC
remote-cert-tls server
verb 3
auth SHA256
key-direction 1
auth-nocache
ping 10
verb 4
mute-replay-warnings
sndbuf 0
rcvbuf 0

tcp-nodelay
log-append /var/log/openvpn/client.log
status /var/log/openvpn/status.log

<ca>
—–BEGIN CERTIFICATE—–
MIIFJzCCBA+gAwIBAgIJAI5PDwaPH2XzMA0GCSqGSIb3RWEBCwUAMIG9MQswCQYD
….
….
…
08Aynygz5WbgwlMHq6V066pR5QWilLGLnAiO
—–END CERTIFICATE—–
</ca>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
—–BEGIN OpenVPN Static key V1—–
02b8a0e629439cbd9f6cca9320ef4ed2
…
…
…
4f339faf438a03648a65be19edcd2d07
—–END OpenVPN Static key V1—–
</tls-auth>
<cert>
—–BEGIN CERTIFICATE—–
MIIFdzCCBF+gAwIBAgIBEjANBgkqhkiG9w0rvssFADCBvTELMAkGA1UEBhMCSVQx
…
…
…
AMB7PE53rT4vvtY=
—–END CERTIFICATE—–
</cert>

<key>
—–BEGIN PRIVATE KEY—–
MIIEvgIBADANBgkqhkiG9w0BAQEebbAASCBKgwggSkAgEAAoIDa5Ece1mBC9k6P
…
…
…
6j9Z4Ds8HMi5borM7oEokg9j
—–END PRIVATE KEY—–
</key>

Tagged with: client | Devuan5 | openvpn

Categorised as: Linux | Networking | VPN | Work

Comments are disabled on this post