Skip to content

Instantly share code, notes, and snippets.

@cdwilson

cdwilson/setup_bridged_vpn.sh

Created July 7, 2012 21:49
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save cdwilson/3068186 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save cdwilson/3068186 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. cdwilson revised this gist Jul 8, 2012. 1 changed file with 4 additions and 2 deletions.
    6 changes: 4 additions & 2 deletions setup_bridged_vpn.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -59,7 +59,7 @@ sudo gzip -d /etc/openvpn/server.conf.gz
    # ;server 10.8.0.0 255.255.255.0
    # server-bridge 10.0.1.204 255.255.255.0 10.0.1.50 10.0.1.99

    # initially, i wasn't able to connect because I hadn't specified "script-security 2"
    # FYI, initially, i wasn't able to connect because I hadn't specified "script-security 2"
    # inspecting /var/log/syslog revealed:
    # NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
    # ...
    @@ -79,4 +79,6 @@ sudo cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf /etc/ope
    # key client1.key

    # start openvpn on the server
    sudo service openvpn start
    sudo service openvpn start

    # install the client.conf and keys on the client, and connect!
  2. cdwilson revised this gist Jul 8, 2012. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion setup_bridged_vpn.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -62,7 +62,7 @@ sudo gzip -d /etc/openvpn/server.conf.gz
    # initially, i wasn't able to connect because I hadn't specified "script-security 2"
    # inspecting /var/log/syslog revealed:
    # NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
    # ...
    # ...
    # WARNING: External program may not be called unless '--script-security 2' or higher is enabled. Use '--script-security 3 system' for backward compatibility with 2.1_rc8 and earlier. See --help text or man page for detailed info.
    # WARNING: Failed running command (--up/--down): external program fork failed
    # Exiting
  3. cdwilson revised this gist Jul 8, 2012. 1 changed file with 28 additions and 6 deletions.
    34 changes: 28 additions & 6 deletions setup_bridged_vpn.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -7,17 +7,19 @@
    # don't actually run this as a script
    exit 0

    # setup airport to port forward 1194 to OpenVPN server

    sudo apt-get -y install openvpn bridge-utils

    sudo mkdir /etc/openvpn/easy-rsa/
    sudo cp -r /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/easy-rsa/

    # edit /etc/openvpn/easy-rsa/vars adjusting the following to your environment
    # edit /etc/openvpn/easy-rsa/vars:
    # export KEY_COUNTRY="US"
    # export KEY_PROVINCE="CA"
    # export KEY_CITY="San Diego"
    # export KEY_ORG="cdwilson.us"
    # export KEY_EMAIL="[email protected]"
    # export KEY_PROVINCE="NC"
    # export KEY_CITY="Winston-Salem"
    # export KEY_ORG="Example Company"
    # export KEY_EMAIL="[email protected]"

    # CA
    cd /etc/openvpn/easy-rsa/
    @@ -46,7 +48,7 @@ source vars
    sudo cp /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz /etc/openvpn/
    sudo gzip -d /etc/openvpn/server.conf.gz
    # edit /etc/openvpn/server.conf:
    # script-security 3
    # script-security 2
    # dev tap
    # ;dev tun
    # up "/etc/openvpn/up.sh br0 eth0"
    @@ -57,4 +59,24 @@ sudo gzip -d /etc/openvpn/server.conf.gz
    # ;server 10.8.0.0 255.255.255.0
    # server-bridge 10.0.1.204 255.255.255.0 10.0.1.50 10.0.1.99

    # initially, i wasn't able to connect because I hadn't specified "script-security 2"
    # inspecting /var/log/syslog revealed:
    # NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
    # ...
    # WARNING: External program may not be called unless '--script-security 2' or higher is enabled. Use '--script-security 3 system' for backward compatibility with 2.1_rc8 and earlier. See --help text or man page for detailed info.
    # WARNING: Failed running command (--up/--down): external program fork failed
    # Exiting

    # client config
    # install openvpn client on OSX, http://code.google.com/p/tunnelblick/
    sudo cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf /etc/openvpn/
    # edit /etc/openvpn/client.conf:
    # dev tap
    # ;dev tun
    # remote vpn.cdwilson.us 1194
    # ca ca.crt
    # cert client1.crt
    # key client1.key

    # start openvpn on the server
    sudo service openvpn start
  4. cdwilson revised this gist Jul 8, 2012. 2 changed files with 60 additions and 7 deletions.
    60 changes: 60 additions & 0 deletions setup_bridged_vpn.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,60 @@
    #!/bin/sh

    # Ubuntu 12.04

    # https://help.ubuntu.com/12.04/serverguide/openvpn.html

    # don't actually run this as a script
    exit 0

    sudo apt-get -y install openvpn bridge-utils

    sudo mkdir /etc/openvpn/easy-rsa/
    sudo cp -r /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/easy-rsa/

    # edit /etc/openvpn/easy-rsa/vars adjusting the following to your environment
    # export KEY_COUNTRY="US"
    # export KEY_PROVINCE="CA"
    # export KEY_CITY="San Diego"
    # export KEY_ORG="cdwilson.us"
    # export KEY_EMAIL="[email protected]"

    # CA
    cd /etc/openvpn/easy-rsa/
    # whichopensslcnf was broken so I had to hard code:
    # export KEY_CONFIG="$EASY_RSA/openssl-1.0.0.cnf"
    source vars
    ./clean-all
    ./build-ca

    # server certs
    ./build-key-server server
    ./build-dh
    cd keys/
    cp server.crt server.key ca.crt dh1024.pem /etc/openvpn/

    # client certs
    cd /etc/openvpn/easy-rsa/
    source vars
    ./build-key client1
    # copy the following files to the client using a secure method:
    # /etc/openvpn/ca.crt
    # /etc/openvpn/easy-rsa/keys/client1.crt
    # /etc/openvpn/easy-rsa/keys/client1.key

    # server config
    sudo cp /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz /etc/openvpn/
    sudo gzip -d /etc/openvpn/server.conf.gz
    # edit /etc/openvpn/server.conf:
    # script-security 3
    # dev tap
    # ;dev tun
    # up "/etc/openvpn/up.sh br0 eth0"
    # ca ca.crt
    # cert server.crt
    # key server.key
    # dh dh1024.pem
    # ;server 10.8.0.0 255.255.255.0
    # server-bridge 10.0.1.204 255.255.255.0 10.0.1.50 10.0.1.99


    7 changes: 0 additions & 7 deletions setup_vpn.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -1,7 +0,0 @@
    #!/bin/sh

    # Ubuntu 12.04

    # https://help.ubuntu.com/12.04/serverguide/openvpn.html

    sudo apt-get -y install openvpn
  5. cdwilson created this gist Jul 7, 2012.
    7 changes: 7 additions & 0 deletions setup_vpn.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,7 @@
    #!/bin/sh

    # Ubuntu 12.04

    # https://help.ubuntu.com/12.04/serverguide/openvpn.html

    sudo apt-get -y install openvpn