Editing OpenVPN

Warning: You are not logged in. Your IP address will be recorded in this page's edit history.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.

Learn more about Contributing to the wiki.

This page describes setting up openVPN

= on an [[Nokia N900|N900]] =

== Server Setup ==
The server should be setup like so:
  http://openvpn.net/index.php/open-source/documentation/howto.html

udp is better than tcp if you can use it. If your client is likely to be behind firewalls then tcp is more likely to work.

Consider whether compression is useful - if you're transferring media or using ssh tunnels then it may not gain much.

If you need access to a nameserver on your LAN you'll need this in the server.conf:
 push "dhcp-option DNS 10.0.0.7"            
 push "dhcp-option DOMAIN dgreaves.com"

== Client Setup ==

You'll need the [http://maemo.org/downloads/product/Maemo5/openvpn/ openVPN client] and the [http://maemo.org/downloads/product/Maemo5/openvpn-applet/ openVPN applet]

Create a matching client setup conf and copy it together with the client certificate, key and the ca file to the <code>/etc/openvpn/</code> directory on the device.

The client.conf may need:
 # Allow scripts to be run
 script-security 2
 # and update the config when a route changes
 up /etc/openvpn/maemo-update-resolvconf
 plugin /opt/openvpn/lib/openvpn/openvpn-down-root.so "script_type=down /etc/openvpn/maemo-update-resolvconf"

The applet will pickup any .conf files in that directory.

= N9 HARMATTAN =

Install it from N9Qt

domain="www.$USER.org" # adapt
    server_inet="0.0.0.0" # adapt
    dev="tun2"
    port="80"
    key="/etc/openvpn/$domain.key"
    server="10.9.8.254"
    client="10.9.8.1"
    conf="/etc/openvpn/$domain.conf"

Server Side :

sudo mkdir -p /etc/openvpn
   sudo openvpn --genkey --secret "$key"

cat<<EOF | sudo tee "$conf"
   dev $dev
   port $port
   ifconfig $server $client
   secret $key
   EOF
   sudo openvpn --config "$conf" --verb 6

Client Side :

sudo mkdir -p /etc/openvpn

ssh -t $domain \
        'sudo cat /etc/openvpn/$domain.key' \
        | sudo dd of="/etc/openvpn/$domain.key"

cat<<EOF | sudo tee "$conf"
   remote $domain
   dev $dev
   port $port
   ifconfig $client $server
   secret $key
   persist-tun
   nobind
   EOF

$sudo /usr/sbin/openvpn --script-security 2 --config $conf --verb 6

[[Category:Software]]
[[Category:HowTo]]

Please note that all contributions to maemo.org wiki may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see maemo.org wiki:Copyrights for details). Do not submit copyrighted work without permission!

Summary:

Cancel | Editing help (opens in new window)

Retrieved from "http://wiki.maemo.org/OpenVPN"

Personal tools

Navigation

Views

Editing OpenVPN

@@ Line 1: / Line 1: @@
 This page describes setting up openVPN
-= On N8x0 =
-[[ToDo]]
+= on an [[Nokia N900|N900]] =
-= On [[Nokia N900|N900]] / Maemo =
 == Server Setup ==
@@ Line 33: / Line 30: @@
 The applet will pickup any .conf files in that directory.
 = N9 HARMATTAN =
@@ Line 39: / Line 35: @@
 Install it from N9Qt
-* http://wiki.maemo.org/N9QTweak
+     domain="www.$USER.org" # adapt
+     server_inet="0.0.0.0" # adapt
+    dev="tun2"
-== Env variables ==
+     port="80"
+     key="/etc/openvpn/$domain.key"
-Will be used in Client and Server side
+     server="10.9.8.254"
+     client="10.9.8.1"
-     domain="www.$USER.tld" # must be adapted to your public DNS record
-     server_inet="0.0.0.0" # must be adapted to your public inet IP
-     port="80" # 80 is prefered to pass firewall or 443 ?
-     dev="tun2"
-     server="10.9.8.254" # can be changed
-     client="10.9.8.1"  # can be changed too
      conf="/etc/openvpn/$domain.conf"
-    key="/etc/openvpn/$domain.key"
-== Server Side : ==
+Server Side :
     sudo mkdir -p /etc/openvpn
@@ Line 66: / Line 55: @@
     secret $key
     EOF
-Launch it by hand or with service :
     sudo openvpn --config "$conf" --verb 6
+Client Side :
-== Client Side : ==
+   sudo mkdir -p /etc/openvpn
-Copy Key and configure it :
+    ssh -t $domain \
-   sudo mkdir -p /etc/openvpn
-   ssh -t $domain \
          'sudo cat /etc/openvpn/$domain.key' \
          | sudo dd of="/etc/openvpn/$domain.key"
@@ Line 91: / Line 75: @@
     EOF
-Then launch it
     $sudo /usr/sbin/openvpn --script-security 2 --config $conf --verb 6
-== More ==
-FeedBack welcome at :
-http://talk.maemo.org/showthread.php?t=89703&highlight=OpenVPN&page=2
 [[Category:Software]]
 [[Category:HowTo]]
 [[Category:Software]]
 [[Category:HowTo]]