mirror/openvpn-install
1
0
Fork 0
mirror of https://github.com/Nyr/openvpn-install.git synced 2024-11-24 14:06:07 +03:00
Code Issues Projects Releases Wiki Activity

This makes the previous change work on newer versions of openvpn

Browse Source 
New versions use 2048 by default
This commit is contained in:
Dylan M. Taylor 2015-04-30 16:34:18 -04:00
parent 515d942891
commit 8f0104491e
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
openvpn-install.sh
View File

@ -211,6 +211,7 @@ else
cp -u -p openssl-1.0.0.cnf openssl.cnf cp -u -p openssl-1.0.0.cnf openssl.cnf
# Fuck you NSA - 1024 bits was the default for Debian Wheezy and older # Fuck you NSA - 1024 bits was the default for Debian Wheezy and older
sed -i 's|export KEY_SIZE=1024|export KEY_SIZE=4096|' /etc/openvpn/easy-rsa/2.0/vars sed -i 's|export KEY_SIZE=1024|export KEY_SIZE=4096|' /etc/openvpn/easy-rsa/2.0/vars
sed -i 's|export KEY_SIZE=2048|export KEY_SIZE=4096|' /etc/openvpn/easy-rsa/2.0/vars
# Create the PKI # Create the PKI
. /etc/openvpn/easy-rsa/2.0/vars . /etc/openvpn/easy-rsa/2.0/vars
. /etc/openvpn/easy-rsa/2.0/clean-all . /etc/openvpn/easy-rsa/2.0/clean-all
@ -239,6 +240,7 @@ else
cd /etc/openvpn/ cd /etc/openvpn/
# Set the server configuration # Set the server configuration
sed -i 's|dh dh1024.pem|dh dh4096.pem|' server.conf sed -i 's|dh dh1024.pem|dh dh4096.pem|' server.conf
sed -i 's|dh dh2048.pem|dh dh4096.pem|' server.conf
sed -i 's|;push "redirect-gateway def1 bypass-dhcp"|push "redirect-gateway def1 bypass-dhcp"|' server.conf sed -i 's|;push "redirect-gateway def1 bypass-dhcp"|push "redirect-gateway def1 bypass-dhcp"|' server.conf
sed -i "s|port 1194|port $PORT|" server.conf sed -i "s|port 1194|port $PORT|" server.conf
# DNS # DNS