User Tools
Writing /app/www/public/data/meta/databaseandnetworkmanagement/open_vpn_install.meta failed
databaseandnetworkmanagement:open_vpn_install
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| databaseandnetworkmanagement:open_vpn_install [2017/07/06 10:48] – 1carew1 | databaseandnetworkmanagement:open_vpn_install [2021/06/25 10:09] (current) – external edit 127.0.0.1 | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| + | ====== Open VPN install on Ubuntu 16 ====== | ||
| + | The following tutorial gives a very in-depth tutorial on how to do this so I recommend just following that : https:// | ||
| + | |||
| + | The only extra items I did were: | ||
| + | * create rules on the Netgear Router to allow port forward of 1194 (default Open VPN port) to comeragh | ||
| + | * changed the udp protocol used to be tcp instead this is in 2 or 3 places in all of the configs nothing major | ||
| + | * generated client files based on the person using them rather than calling it client1 | ||
| + | * Added dns to the config : sudo vi / | ||
| + | |||
| + | |||
| + | I encountered one issue however, the VPN would connect using tunnelblick on Mac, however the public IP did not change. | ||
| + | I followed the trouble shooting guide here : https:// | ||
| + | The resolution was to edit the / | ||
| + | |||
| + | ===== VPN Program for Mac ===== | ||
| + | https:// | ||
| + | |||
| + | ===== Generating New VPN Certs ===== | ||
| + | * ssh to the VPN server | ||
| + | * cd ~/ | ||
| + | * source vars | ||
| + | * ./ | ||
| + | * # Give them a good password (pem passphrase), | ||
| + | * # When asked to sign, y and enter, when asked to commit y and enter | ||
| + | * # if an error appears such as db then the user already exists so give them a different name like firstname_lastname_1 etc. | ||
| + | * # if successful it should say : Write out database with 1 new entries\n Data Base Updated | ||
| + | * cd ~/ | ||
| + | * ./ | ||
| + | * # The opvn file should be located : ~/ | ||
| + | |||
| + | ===== Revoking VPN Certs ===== | ||
| + | * cd ~/ | ||
| + | * source vars | ||
| + | * ./ | ||
| + | * sudo cp ~/ | ||
| + | * sudo systemctl restart openvpn@server | ||
| + | |||
| + | |||
| + | |||
| + | ===== Revoking Google auth ===== | ||
| + | * / | ||
| + | * sudo ./confdba -u -m -k pvt_google_auth_secret_locked -v false -p username | ||