How did I install OpenVPN Server 2.6.1 to Debian 12?

dmitrii_fediuk · July 16, 2024, 7:43am

Step 1

curl -fsSL https://swupdate.openvpn.net/repos/repo-public.gpg | gpg --dearmor > /etc/apt/keyrings/openvpn-repo-public.gpg

Step 2

github.com

dmitrii-fediuk/5.9.188.84/blob/2024-07-16/etc/apt/sources.list.d/openvpn.list#L1-L4


      
          # 2024-07-16
          # 1) "Install OpenVPN Server": https://github.com/dmitrii-fediuk/5.9.188.84/issues/73
          # 2) "How did I install OpenVPN Server to Debian 12?": https://df.tips/t/2260
          deb [arch=amd64 signed-by=/etc/apt/keyrings/openvpn-repo-public.gpg] https://build.openvpn.net/debian/openvpn/stable bookworm main

Step 3

apt-get update

Step 4

apt-get install openvpn

Step 5

apt-get install openvpn-dco-dkms

Step 5.1

openvpn --version

2024-07-17--12-31-52

Step 6

How did I setup a Certificate Authority for OpenVPN on Debian 12?

Step 7

./easyrsa gen-req server nopass

Step 8

cp pki/private/server.key /etc/openvpn

Step 9

./easyrsa sign-req server server

Step 10

cp pki/issued/server.crt /etc/openvpn
cp pki/ca.crt /etc/openvpn

Step 11

./easyrsa gen-dh
openvpn --genkey secret ta.key
cp ta.key /etc/openvpn
cp pki/dh.pem /etc/openvpn

Step 12

mkdir -p /etc/openvpn/client-configs/keys
chmod -R 700 /etc/openvpn/client-configs
./easyrsa gen-req client1 nopass
cp pki/private/client1.key /etc/openvpn/client-configs/keys

Step 13

./easyrsa sign-req client client1
cp pki/issued/client1.crt /etc/openvpn/client-configs/keys

Step 14

cp pki/ca.crt /etc/openvpn/client-configs/keys
cp ta.key /etc/openvpn/client-configs/keys

Step 15

github.com/dmitrii-fediuk/5.9.188.84/blob/2024-07-17-5/etc/openvpn/server.conf

Step 16

github.com

dmitrii-fediuk/5.9.188.84/blob/2024-07-17-6/etc/sysctl.conf#L20-L26


      
          # 2024-07-17
          # 1) "Configure OpenVPN Server": https://github.com/dmitrii-fediuk/5.9.188.84/issues/79
          # 2) "How did I install OpenVPN Server 2.6.1 to Debian 12?": https://df.tips/t/2260
          # 3.1) https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-debian-11#step-5-adjusting-the-server-networking-configuration
          # 3.2) https://archive.is/5Im7t#step-5-adjusting-the-server-networking-configuration
          # 3.3) https://web.archive.org/web/20240717114611/https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-debian-11#step-5-adjusting-the-server-networking-configuration
          net.ipv4.ip_forward = 1

Step 17

systemctl start openvpn@server

Step 18

systemctl status openvpn@server

2024-07-17--16-31-24

Step 19

ip addr show tun0

2024-07-17--16-33-12

Step 20

systemctl enable openvpn@server

2024-07-17--16-34-43

Step 21

How did I configure iptables for OpenVPN Server 2.6.1 on Debian 12?

Step 22

github.com/dmitrii-fediuk/5.9.188.84/blob/2024-07-17-7/etc/openvpn/client-configs/base.conf

Step 23

github.com/dmitrii-fediuk/5.9.188.84/blob/2024-07-17-8/etc/openvpn/client-configs/make_config.sh

Step 24

chmod 700 /etc/openvpn/client-configs/make_config.sh

Step 25

cd /etc/openvpn/client-configs
./make_config.sh client1

Step 26

How did I fix the «CA not defined» error of the OpenVPN client program?

Step 27

2024-07-17--17-23-53