openvpn安装和配置_可编辑.docVIP

openvpn安装和配置

openvpn安装和配置

PAGE/NUMPAGES

openvpn安装和配置

1.软件包：lzoopenvpnopenssl

2.系统环境:Vpscentos5

3.采用编译方式进行安装

tarxzvfopenssl-version.tar.gz

tarxzvflzo-version.tat.gz

tarxzvfopenvpn-version.tar.gz

cd/openssl

./configure--prefix=/usr/local/openssl

make;makeinstall

cd..

cd/lzo

./config

make;makeinstall

cd..

cdopenvpn

./configure--with-lzo-headers=/usr/local/lzo/inlcude--with-lzo-lib=/usr/local/lzo/lib

make;makeinstall

4.生成证书：

cd/root/openvpn-2.0.9/easy-rsa

i.exportD=`pwd`

ii.exportKEY_CONFIG=$D/openssl.cnf

iii.exportKEY_DIR=$D/keys

iv.exportKEY_SIZE=1024

v.exportKEY_COUNTRY=CN

vi.exportKEY_PROVINCE=BJ

vii.exportKEY_CITY=BJ

viii.exportKEY_ORG=buaa

ix.exportKEY_EMAIL=

b)./clean-all

c)./build-ca

./clean-all

./build-ca

Generatinga1024bitRSAprivatekey

++++++

++++++

writingnewprivatekeytoca.key

Youareabouttobeaskedtoenterinformationthatwillbeincorporated

intoyourcertificaterequest.

WhatyouareabouttoenteriswhatiscalledaDistinguishedNameoraDN.

Therearequiteafewfieldsbutyoucanleavesomeblank

Forsomefieldstherewillbeadefaultvalue,

Ifyouenter.,thefieldwillbeleftblank.

CountryName(2lettercode)[CN]:

StateorProvinceName(fullname)[BJ]:

LocalityName(eg,city)[BJ]:

OrganizationName(eg,company)[dvdmaster]:buaa

OrganizationalUnitName(eg,section)[]:gait

CommonName(eg,yournameoryourservershostname)[]:server

EmailAddress[]:

d)./build-key-serverserver

./build-key-serverserver

Generatinga1024bitRSAprivatekey

++++++

++++++

writingnewprivatekeytoserver.key

Youareabouttobeaskedtoenterinformationthatwillbeincorporated

intoyourcertificaterequest.

WhatyouareabouttoenteriswhatiscalledaDistinguishedNameoraDN.

Therearequiteafewfieldsbutyoucanleavesomeblank

Forsomefieldstherewillbeadefaultvalue,

Ifyouenter.,thefieldwillbeleftblank.

CountryNam