#!/bin/bash # delete routing for whole network sudo route del -net 192.168.1.0 netmask 255.255.255.0 dev tap0 # add route to hosts for ip in {30..50}; do sudo route add 192.168.1.${ip} dev tap0 done
extract p12 file
Zertifikat des Benutzers:
openssl pkcs12 -in *.p12 -clcerts -nokeys -nodes -out user.pem
Zertifikat der Zertifizierungsstelle:
openssl pkcs12 -in *.p12 -cacerts -nodes -out ca.pem
Privater Schlüssel:
openssl pkcs12 -in *.p12 -nocerts -nodes -out keys.pem
config file
tls-client
client
dev tun
proto udp
tun-mtu 1400
remote YOUR_HOST.dyndns.org 1194
ca ca.pem
cert user.pem
key keys.pem
cipher BF-CBC
comp-lzo
verb 3
ns-cert-type server
tls-remote YOUR_HOST.dyndns.org
float
#!/bin/sh sudo su apt-get install -y openvpn network-manager-openvpn