Dotaz: Nastaveni openVPN

[Lithius]

Dobry den, nedari se mi nakonfigurovat ani spustit openvpn jako server. Uplne v tom plavu a nevim jak na to :(

Prosil bych nekoho o nejakou podrobnejsi daru a vysvetleni pokud by to bylo mozne. Precetl jsem spousty clanku ale porad se mi to nedari.

To co chci udelat je nasledujici. Vytvorit pomoci openvpn sit a nasledne pres druhou sitovku (abych si neomezoval provoz na te kterou pouzivam) sdilet internet do te privatni site.

Odpovědi

[Lithius]

Abych jeste dodal : tohle je vypis kdyz chci spustit server

openvpn --config /etc/openvpn/vpn_server.conf Wed Jul 11 16:22:42 2007 Warning: Error redirecting stdout/stderr to --log file: /var/log/openvpn: Permission denied (errno=13) Wed Jul 11 16:22:42 2007 OpenVPN 2.0.9 x86_64-pc-linux-gnu [SSL] [LZO] [EPOLL] built on Mar 2 2007 Wed Jul 11 16:22:42 2007 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port. Wed Jul 11 16:22:42 2007 WARNING: you are using user/group/chroot without persist-key/persist-tun -- this may cause restarts to fail Wed Jul 11 16:22:42 2007 WARNING: --keepalive option is missing from server config Wed Jul 11 16:22:42 2007 Note: cannot open /var/run/openvpn/vpn.status for WRITE Wed Jul 11 16:22:42 2007 Diffie-Hellman initialized with 1024 bit key Wed Jul 11 16:22:42 2007 Cannot load private key file /etc/openvpn/server.key: error:0200100D:system library:fopen:Permission denied: error:20074002:BIO routines:FILE_CTRL:system lib: error:140B0002:SSL routines:SSL_CTX_use_PrivateKey_file:system lib Wed Jul 11 16:22:42 2007 Error: private key password verification failed Wed Jul 11 16:22:42 2007 Exiting

A takhle vypada ten vpn_server.conf

mode server tls-server dev tap0 ifconfig 20.2.2.2 255.255.255.0 ifconfig-pool 20.2.2.1 20.2.2.1 255.255.255.0

ca /etc/openvpn/01.pem cert /etc/openvpn/server.crt key /etc/openvpn/server.key dh /etc/openvpn/dh1024.pem

log-append /var/log/openvpn status /var/run/openvpn/vpn.status 10

user openvpn group openvpn comp-lzo verb 3

[Lithius]

Nakonec jsem to rozchodil podle http://www.abclinuxu.cz/blog/nijel/2005/6/4/89429 ... ted jen jeste vyresit ten zbytek :)