mirror of
https://github.com/Nyr/openvpn-install.git
synced 2024-11-24 14:06:07 +03:00
71 lines
2.5 KiB
Markdown
71 lines
2.5 KiB
Markdown
##openvpn-install
|
|
OpenVPN [road warrior](http://en.wikipedia.org/wiki/Road_warrior_%28computing%29) installer for Debian, Ubuntu and CentOS.
|
|
|
|
This script will let you setup your own VPN server in no more than a minute, even if you haven't used OpenVPN before. It isn't bulletproof but has been designed to be as unobtrusive and universal as possible.
|
|
|
|
##Fork
|
|
This fork includes :
|
|
- no logs
|
|
- TLS 1.2 only
|
|
- AES-128-GCM encryption (instead of BF-CBC)
|
|
- Legacy version for less hardened encryption
|
|
- 4096 bits DH (instead of 2048 bits)
|
|
- [FDN's DNS Servers](http://www.fdn.fr/actions/dns/)
|
|
- Every feature of the [original script](https://github.com/Nyr/openvpn-install) (I check periodically to sync the latest commits from source)
|
|
|
|
##Installation
|
|
|
|
Run the script and follow the assistant:
|
|
|
|
```
|
|
wget --no-check-certificate https://raw.githubusercontent.com/Angristan/OpenVPN-install-nyr/master/openvpn-install.sh
|
|
chmod +x openvpn-install.sh
|
|
./openvpn-install.sh
|
|
```
|
|
|
|
Once it ends, you can run it again to add more users, remove some of them or even completely uninstall OpenVPN.
|
|
|
|
##Variants
|
|
|
|
When you will launch the script, you will be asked to choose the variant of the script you want to use.
|
|
|
|
To check your OpenVPN version, use `openvpn --version`
|
|
|
|
If your server **and** your client have OpenVPN 2.3.3 or higher, use *latest*. If your server **or** your client have OpenVPN 2.3.2 or lower, use *legacy*.
|
|
|
|
I made two versions to make sure you can get the best encryption possible, but also to support most devices as possible.
|
|
|
|
###Latest (OpenVPN > 2.3.3)
|
|
|
|
It will work for :
|
|
- Debian 8
|
|
- Ubuntu 15.10
|
|
- CentOS 6
|
|
- CentOS 7
|
|
- All recent clients with OpenVPN 2.3.3 or higher
|
|
|
|
###Legacy (OpenVPN < 2.3.2)
|
|
|
|
It's the same script as *latest*, but with TLS 1.0 instead of TLS 1.2 and AES-256-CBC instead of AES-128-GCM. (OpenVPN 2.3.2 and lower doesn't support `tls-min` and `tls-cipher`)
|
|
|
|
Other features are still included.
|
|
|
|
The following Operating Systems are only supported by the *legacy* variant :
|
|
- Debian 7
|
|
- Ubuntu 12.04 LTS
|
|
- Ubuntu 14.04 LTS
|
|
- Ubuntu 15.04
|
|
- All older clients with OpenVPN 2.3.2 or lower (it *could* be NAS devices, routers, etc)
|
|
|
|
If your server and/or your client does not support OpenVPN 2.3.3 or higher, you should use *legacy*.
|
|
|
|
|
|
|
|
You can get a little VPS for just 1.49€/month at [PulseHeberg](http://manager.pulseheberg.com/aff.php?aff=1204).
|
|
|
|
## Licence
|
|
|
|
Based on the work of [Nyr](https://github.com/Nyr/openvpn-install)
|
|
|
|
[MIT Licence](https://raw.githubusercontent.com/Angristan/openvpn-install-nyr/master/LICENSE)
|