umgeher's changelog

OpenBSD - client OpenVPN

OpenVPN is a free and open-source virtual private network (VPN).

Install

Let’s install the openvpn client.

pkg_add openvpn

Settings

Config file

Assuming that you have an openvpn settings file, calling here as setup.ovpn.

cat setup.ovpn

client
proto tcp-client
remote 191.8.146.114 1194
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name server_lBklUYL2BA98l9B3 name
auth SHA256
auth-nocache
cipher AES-128-GCM
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
ignore-unknown-option block-outside-dns
setenv opt block-outside-dns # Prevent Windows 10 DNS leak
verb 3
<ca>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----
...
-----END ENCRYPTED PRIVATE KEY-----
</key>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
...
-----END OpenVPN Static key V1-----
</tls-crypt>

ETC

Let’s create a directory to ours opvn files, as root:

mkdir -p /etc/openvpn

Store your opvn files in /etc/openvpn.

Manual

To connect use:

/usr/local/sbin/openvpn --config /etc/openvpn/setup.ovpn

If you need to provide a password, use --askpass flag.

/usr/local/sbin/openvpn --askpass --config /etc/openvpn/setup.ovpn

Daemon

Create a hostname file to your new network interface.

touch /etc/hostname.tun0

Edit the hostname.tun0 file.

up
!/usr/local/sbin/openvpn --daemon --config /etc/openvpn/setup.ovpn

Now you can setup your interface.

ifconfig tun0 up

Articles from blogs I follow around the net

AI: the not-so-good parts

Hey, if you normally read the written form of my talks, I highly suggest watching or listening to the video for this one. The topic I'm covering is something I'm quite passionate about and I don't think that my ton…

via Xe Iaso's blog 2025-01-16 00:00

Emacs? No, emacsclient!

This is a shoutout for all of you who are tired of waiting emacs to load on startup or annoyed to feel forced to leave an instance open. emacsclient can save you from that. All you have to do is to leave an daemon open. Don’t use (server-start) because tha…

via Lucas E M M. opinions 2024-01-16 21:01

Effortless OpenBSD Audio and Desktop Screen Recording Guide

Rafael Sadowski (rsadowski@) has added a new post to his Shut up and hack series, titled Effortless OpenBSD Audio and Desktop Screen Recording Guide, where he takes the reader through the steps needed to configure your OpenBSD system for audio and video reco…

via OpenBSD Journal 2024-01-15 17:07

Generated by openring