meta data for this page
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionLast revisionBoth sides next revision | ||
linux:openvpn [2019/03/29 12:33] – [Certifcates] niziak | linux:openvpn [2020/10/19 13:52] – niziak | ||
---|---|---|---|
Line 1: | Line 1: | ||
+ | ====== OpenVPN ====== | ||
+ | |||
====== Installation ====== | ====== Installation ====== | ||
- | * Put clien configuration into / | + | * Put client configuration into ''/ |
+ | * Start openvpn services <code bash> | ||
+ | systemctl start openvpn-client@config-name | ||
+ | systemctl status openvpn-client@config-name | ||
+ | systemctl enable openvpn-client@config-name | ||
+ | </ | ||
+ | |||
+ | NOTE: `openvpn-client@` service doesn' | ||
+ | The result of failed openvpn daemon looks like: | ||
+ | <code bash> | ||
+ | systemctl status openvpn-client@config-name | ||
+ | ... | ||
+ | | ||
+ | Docs: man: | ||
+ | | ||
+ | | ||
+ | Main PID: 19630 (code=exited, | ||
+ | ... | ||
+ | </ | ||
+ | |||
+ | To make sure your VPN is running: | ||
+ | <code bash> | ||
+ | |||
+ | and enter following config: | ||
+ | |||
+ | < | ||
+ | [Service] | ||
+ | Restart=always | ||
+ | RestartSec=300 | ||
+ | </ | ||
+ | |||
+ | ===== issue ===== | ||
+ | < | ||
+ | openvpn[281925]: | ||
+ | openvpn[281924]: | ||
+ | </ | ||
+ | |||
+ | Solution: | ||
+ | <file | / | ||
+ | [Service] | ||
+ | ExecStart= | ||
+ | ExecStart=/ | ||
+ | %i.conf | ||
+ | </ | ||
+ | |||
+ | |||
+ | ===== Deprecated ===== | ||
+ | |||
+ | * Put client | ||
* Enable autostart ALL or specified configs in ''/ | * Enable autostart ALL or specified configs in ''/ | ||
* Generate systemd services from openvon configs <code bash> | * Generate systemd services from openvon configs <code bash> | ||
Line 9: | Line 59: | ||
* CA has to be with < | * CA has to be with < | ||
* basicConstraints | * basicConstraints | ||
+ | * nsCertType | ||
* keyUsage | * keyUsage | ||
+ | * subjectKeyIdentifier | ||
+ | * authorityKeyIdentifier | ||
* OpenVPN Server | * OpenVPN Server | ||
* basicConstraints | * basicConstraints | ||
Line 99: | Line 152: | ||
MinProtocol = TLSv1 | MinProtocol = TLSv1 | ||
</ | </ | ||
+ | |||
+ | **Error**: File transfer stuck | ||
+ | **Cause**: File transfer are using maximum packet size, which probably cannot fit to MTU limitataions | ||
+ | **Solution**: | ||
+ | < | ||
+ | # On one side of connection | ||
+ | mssfix 1400 | ||
+ | |||
+ | # MTU on tunX interface | ||
+ | # has to be set on both sides | ||
+ | tun-mtu 1400 | ||
+ | </ | ||
+ | |||
+ | More: | ||
+ | * [[https:// | ||
+ | * [[https:// | ||
====== rsyslog ====== | ====== rsyslog ====== | ||
<file txt / | <file txt / |