Openvpn

From DWIKI
Revision as of 16:44, 31 January 2023 by Tony (talk | contribs) (→‎HOWTO)

HOWTO

Using easyrsa

https://community.openvpn.net/openvpn/wiki/EasyRSA3-OpenVPN-Howto

Revoke certificate

./easyrsa revoke someclient
./easyrsa gen-crl 

Check crl

openssl crl -in -text pki/crl.pem

Check the serials numbers of the revoke certs

grep ^R pki/index.txt

Push DNS to linux clients

http://blog.milford.io/2011/02/setting-up-an-openvpn-client-for-ubuntudebianmint-cli-edition/

echo "up /etc/openvpn/update-resolv-conf" >> ~/client/client.conf 
echo "down /etc/openvpn/update-resolv-conf" >> ~/client/client.conf


Openvpn and systemd

https://ubuntu.com/server/docs/service-openvpn

FAQ

NOTE: FlushIpNetTable failed on interface

This happens on windows, ignore it.


TLS Error: local/remote TLS keys are out of sync

First give it some time


WARNING: 'link-mtu' is used inconsistently

?