mirror/openvpn-install
1
0
Fork 0
mirror of https://github.com/Nyr/openvpn-install.git synced 2024-11-24 14:06:07 +03:00
Code Issues Projects Releases Wiki Activity
3897bc32ff
openvpn-install/README.md
Angristan 3897bc32ff Update README.md
2016-03-15 21:37:58 +01:00

2.5 KiB
Raw Blame History

##openvpn-install OpenVPN road warrior installer for Debian, Ubuntu and CentOS.

This script will let you setup your own VPN server in no more than a minute, even if you haven't used OpenVPN before. It isn't bulletproof but has been designed to be as unobtrusive and universal as possible.

##Fork This fork includes :

  • no logs
  • TLS 1.2 only
  • AES-128-GCM encryption (instead of BF-CBC)
  • Legacy version for less hardened encryption
  • 4096 bits DH (instead of 2048 bits)
  • FDN's DNS Servers
  • Every feature of the original script (I check periodically to sync the latest commits from source)

##Installation

Run the script and follow the assistant:

wget --no-check-certificate https://raw.githubusercontent.com/Angristan/OpenVPN-install-nyr/master/openvpn-install.sh
chmod +x openvpn-install.sh
./openvpn-install.sh

Once it ends, you can run it again to add more users, remove some of them or even completely uninstall OpenVPN.

##Variants

When you will launch the script, you will be asked to choose the variant of the script you want to use.

To check your OpenVPN version, use openvpn --version

If your server and your client have OpenVPN 2.3.3 or higher, use latest. If your server or your client have OpenVPN 2.3.2 or lower, use legacy.

I made two versions to make sure you can get the best encryption possible, but also to support most devices as possible.

###Latest (OpenVPN > 2.3.3)

It will work for :

  • Debian 8
  • Ubuntu 15.10
  • CentOS 6
  • CentOS 7
  • All recent clients with OpenVPN 2.3.3 or higher

###Legacy (OpenVPN < 2.3.2)

It's the same script as latest, but with TLS 1.0 instead of TLS 1.2 and AES-256-CBC instead of AES-128-GCM. (OpenVPN 2.3.2 and lower doesn't support tls-min and tls-cipher)

Other features are still included.

The following Operating Systems are only supported by the legacy variant :

  • Debian 7
  • Ubuntu 12.04 LTS
  • Ubuntu 14.04 LTS
  • Ubuntu 15.04
  • All older clients with OpenVPN 2.3.2 or lower (it could be NAS devices, routers, etc)

If your server and/or your client does not support OpenVPN 2.3.3 or higher, you should use legacy.

You can get a little VPS for just 1.49€/month at PulseHeberg.

Licence

Based on the work of Nyr

MIT Licence