You will need do download from OpenVPN’s official site the Community edition binaries that come prepackaged with a GUI. Install OpenVPN from your official repositories and can invoke them by: sudo openvpn -config ~/path/to/client.ovpn Windows Key '/etc/openvpn/easy-rsa/keys/client.key' Linux We will now create another file client.ovpn with the name of the user we want to authenticate (build key).Replace x.x.x.x with your servers IP address: clientĬert '/etc/openvpn/easy-rsa/keys/client.crt'

Nano -w /etc/openvpn/easy-rsa/keys/client.crt nano -w /etc/openvpn/easy-rsa/keys/ca.crt To configure the OpenVPN client you need to retrieve the ca.crt, client.crt and client.key from remote server using your SFTP/SCP (transfer protocol, secure copy) of choice. Start the server and check if it starts on boot: service openvpn startĬhkconfig openvpn on Step 5 - Configure OpenVPN Let’s continue with configuring our routing on OpenVPN: iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE build-key client Step 4 - Configure Routing Repeat for each client or device: cd /etc/openvpn/easy-rsa We now need to create certificates for clients to authenticate. build-dhĬp dh1024.pem ca.crt server.crt server.key /etc/openvpn build-key-server serverĪfter that we need to generate our Diffie Hellman key exchanges and copy our files to etc/openvpn. Now create the certificate: cd /etc/openvpn/easy-rsaīuild key-server. Copy the easy-rsa folder to etc/openvpn/: mkdir -p /etc/openvpn/easy-r/keysĬp -rf /usr/share/openvpn/easy-rsa/2.0/* /etc/openvpn/easy-rsaĮdit the vars file, the KEY_ variables to be more precise, then copy the OpenSSL config file: nano -w /etc/openvpn/easy-rsa/varsĬp /etc/openvpn/easy-rsa/openssl-1.0.0.cnf /etc/openvpn/easy-rsa/openssl.cnf Step 3 - Generate Keys & CertificatesĪfter configuring the file, we now need to generate some keys and certificates. We uncommented the push parameter which is responsible for routing our client’s system traffic through OpenVPN and changed the section that follows route DNS queries to public Goggle’s public DNS servers. Now let’s edit it: nano -w /etc/openvpn/nf Next we’ll copy the sample configuration file to its new location: cp /usr/share/doc/openvpn-*/sample/sample-config-files/nf /etc/openvpn

Install OpenVPN from your EPEL repository: yum install openvpn -y

Is tunnelblick safe