Tuesday, August 14, 2018

OpenVPN configuration for server and multiple clients

This is a simple post showing a basic configuration for setting up OpenVPN server accepting multiple clients with TLS.

First of all generate self-signed server and client private key and certificates, and dh params. Make sure to write the Organization Name AND Common Name (CN) when asked, otherwise openvpn will fail to verify the certificates.

openssl req -newkey rsa:2048 -nodes -keyout serverkey.pem -x509 -days 365000 -out servercert.pem
openssl req -newkey rsa:2048 -nodes -keyout clientkey.pem -out client.csr
openssl x509 -req -days 365000 -in client.csr -CA servercert.pem -CAkey serverkey.pem -set_serial 01 -out clientcert.pem
openssl dhparam -outform PEM -out dh.pem 1024


Server configuration:

dev tun
mode server
tls-server
server 10.8.0.0 255.255.255.0
ca servercert.pem
cert servercert.pem
key serverkey.pem
dh dh.pem
duplicate-cn
topology subnet
keepalive 10 60
ping-timer-rem
persist-tun
persist-key

If you plan to use the server as gateway like configured below, don't forget to enable IP forwarding and masquerading:

sysctl net.ipv4.ip_forward=1
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j MASQUERADE

Client configuration:

client
redirect-gateway
tls-client
key clientkey.pem
cert clientcert.pem
ca servercert.pem
keepalive 10 60
dev tun


Have fun, tune as needed.

17 comments:

Robotic Process Automation Tutorial said...

Thanks for such a great article here. I was searching for something like this for quite a long time and at last I’ve found it on your blog. It was definitely interesting for me to read about their market situation nowadays. Well written article Thank You for Sharing with Uspmp training in chennai | pmp training institute in chennai | pmp training centers in chennai| pmp training in velachery | pmp training near me | pmp training courses online

Anonymous said...

Hey, Wow all the posts are very informative for the people who visit this site. Good work! We also have a Website. Please feel free to visit our site. Thank you for sharing. Well written article Thank You for Sharing with Us pmp training institute in chennai | pmp training in chennai project management training certification | project management training in chennai | project management certification online |

jvimala said...

You are doing a great job. I would like to appreciate your work for good accuracy
Regards,
best selenium training institute in chennai

institute of marketing said...

Nice post.Thanks for sharing such a amazing post with us and keep blogging
Digital Marketing course in Bangalore fees

DedicatedHosting4u said...

It's a very well endowed, advantageous for everyone ... Thank you for providing us such useful knowledge. Currently, I am a daily reader of your blogs. Thank you most for the wonderful assortment, keep writing.

DedicatedHosting4u.com

Unknown said...

thanks for sharing this type article continue blogging.
i am sharing news article international,national and local news

Asad said...

I'm so glad i always read and check you updates of blog posts. inspiring as always! :) click here

auto slotxo said...

I like the article. Thank you. It has increased knowledge. I also made my articles. Try to come see
สล็อตjoker

Sagaminghahaha said...

You can write an article very much. Thank you for making a great article to read.
Sa gaming สมัคร

Ismail said...

Great article..Thanks for sharing...
Interior Design Sketches in Bangalore

Ismail said...

Thanks for sharing this information with us...
Unani Treatment in Bangalore

Ismail said...

Nice post!! Thanks for sharing...
Digital Marketing in Bangalore

Elegant IT Services said...

Thanks for sharing the Useful Information...
Best IT and Non-IT Training Institute in Bangalore

mamta said...

Very Nice Blog, You are spreading very good information among us… Yes Web Hosting plays very important role in business world. And it is important to have the best hosting services.
Germany VPS Hosting

ีuplay365 said...

I think this is one of the most significant information for me.
And i’m glad reading your article.
But should remark on some general things, the web site style is perfect,
the articles is really great : D. Good job…
vscr888

emblix solutions said...

Thanks for sharing this information. Today, Emblix as one of the best and top most service-oriented Digital Marketing Agency in Hyderabad and India , Which provides high-quality result-oriented Digital Services ranging from SEO to Web Design, Social Media Marketing and more, to a broad spectrum of clients from diverse industry segments. Through a well-oiled combination of Quality Solutions, Transparent Pricing, helping brands connect with customers, Flexible Delivery & Contract Model with a firm commitment to deliver on time and to budget, Emblix has successfully built a strong relationship with clients based on mutual trust and respect. Emblix solutions-digital marketing company

Anonymous said...

Thanks for sharing
Click Now
Click Now
Click Now
Click Now
Click Now
Click Now
Click Now
for more information