OpenBSD - client OpenVPN
OpenVPN is a free and open-source virtual private network (VPN).
Install
Let’s install the openvpn client.
pkg_add openvpn
Settings
Config file
Assuming that you have an openvpn settings file, calling here as setup.ovpn.
cat setup.ovpn
client
proto tcp-client
remote 191.8.146.114 1194
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name server_lBklUYL2BA98l9B3 name
auth SHA256
auth-nocache
cipher AES-128-GCM
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
ignore-unknown-option block-outside-dns
setenv opt block-outside-dns # Prevent Windows 10 DNS leak
verb 3
<ca>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----
...
-----END ENCRYPTED PRIVATE KEY-----
</key>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
...
-----END OpenVPN Static key V1-----
</tls-crypt>
ETC
Let’s create a directory to ours opvn files, as root:
mkdir -p /etc/openvpn
Store your opvn files in /etc/openvpn.
Manual
To connect use:
/usr/local/sbin/openvpn --config /etc/openvpn/setup.ovpn
If you need to provide a password, use --askpass
flag.
/usr/local/sbin/openvpn --askpass --config /etc/openvpn/setup.ovpn
Daemon
Create a hostname file to your new network interface.
touch /etc/hostname.tun0
Edit the hostname.tun0 file.
up
!/usr/local/sbin/openvpn --daemon --config /etc/openvpn/setup.ovpn
Now you can setup your interface.
ifconfig tun0 up
Articles from blogs I follow around the net
OpenBSD 7.5 released
Every six months, spring and fall, a new OpenBSD release emerges on the web and familiar download mirrors. The OpenBSD project has released OpenBSD 7.5, the project's 56th release, with numerous improvements and support for 14 hardware platforms. Notable…
via OpenBSD Journal 2024-04-05 06:16My first clojure project on the list!
Recently, I created a new page on this website. I decided to put all cool projects that I made/find around the web (spoiler alert, for now it has only my projects hehe). I have already put a few, but I noticed that none of them are in clojure which is my m…
via Lucas E M M. opinions 2024-04-01 22:37Introducing ChatMimi: The Xe Iaso Cinematic Universe (XICU) Chatbot
Computers are complicated and this field changes so rapidly that it's hard to keep up. That's why we're excited to announce the release of ChatMimi, the Xe Iaso Cinematic Universe (XICU) chatbot. ChatMimi is a conversational ag…
via Xe Iaso's blog 2024-04-01 00:00Generated by openring
/comments ~umgeher/changelog@lists.sr.ht?Subject=Re: OpenBSD - client OpenVPN
/permalink https://umgeher.org/posts/2022/09/openbsd-client-openvpn.html