Book Image

OpenVPN: Building and Integrating Virtual Private Networks

Book Image

OpenVPN: Building and Integrating Virtual Private Networks

Overview of this book

OpenVPN is a powerful, open source SSL VPN application. It can secure site-to-site connections, WiFi and enterprise-scale remote connections. While being a full-featured VPN solution, OpenVPN is easy to use and does not suffer from the complexity that characterizes other IPSec VPN implementations. It uses the secure and stable TLS/SSL mechanisms for authentication and encryption. This book is an easy introduction to this popular VPN application. After introducing the basics of security and VPN, the book moves on to cover using OpenVPN, from installing it on various platforms, through configuring basic tunnels, to more advanced features, such as using the application with firewalls, routers, proxy servers, and OpenVPN scripting. While providing only necessary theoretical background, the book takes a practical approach, presenting plenty of examples.
Table of Contents (17 chapters)
OpenVPN
Credits
About the Author
About the Reviewers
Preface
Index

Using easy-rsa on Linux


We have learned earlier that easy-rsa is a part of OpenVPN and available on all platforms. Because we have worked through the generation of certificates on Windows, we will now have a look at the same process on a Linux system. On Debian Linux, easy-rsa can be found in the directory /usr/share/doc/openvpn/examples/easy-rsa. Start a root shell and change to this directory:

debian01:/# cd /usr/share/doc/openvpn/examples/easy-rsa
debian01:/usr/share/doc/openvpn/examples/easy-rsa# ls -l
total 80
drwxr-xr-x  2 root root 4096 2005-11-19 09:31 2.0
-rwxr-xr-x  1 root root  242 2005-11-01 12:06 build-ca
-rwxr-xr-x  1 root root  228 2005-11-01 12:06 build-dh
-rwxr-xr-x  1 root root  529 2005-11-01 12:06 build-inter
-rwxr-xr-x  1 root root  516 2005-11-01 12:06 build-key
-rwxr-xr-x  1 root root  424 2005-11-01 12:06 build-key-pass
-rwxr-xr-x  1 root root  695 2005-11-01 12:06 build-key-pkcs12
-rwxr-xr-x  1 root root  662 2005-11-01 12:06 build-key-server
-rwxr-xr-x  1 root...