openwrt-19:openvpn-server

差分

このページの2つのバージョン間の差分を表示します。

この比較画面へのリンク

--- openwrt-19:openvpn-server [2020/02/02 20:20] – admin
+++ openwrt-19:openvpn-server [2020/06/19 14:57] (現在) – [TROUBLE SHOOT] admin
@@ 行 125: / 行 125: @@
 port 1194
 proto udp
-dev tun0
+dev tun
 server 10.8.0.0 255.255.255.0
 topology subnet
@@ 行 134: / 行 134: @@
 persist-tun
 persist-key
+compress lz4-v2
 verb 3
-push "dhcp-option DNS 10.8.0.1"
+push "dhcp-option DNS 8.8.8.8"
+push "dhcp-option DNS 8.8.4.4"
 push "redirect-gateway def1 bypass-dhcp"
 push "block-outside-dns"
 push "persist-tun"
 push "persist-key"
+push "compress lz4-v2"
 <dh>${NL}${OVPN_DH}${NL}</dh>
-<tls-crypt>${NL}${OVPN_TC}${NL}</tls-crypt>
+<tls-auth>${NL}${OVPN_TC}${NL}</tls-auth>
 <ca>${NL}${OVPN_CA}${NL}</ca>
 <cert>${NL}${OVPN_CERT}${NL}</cert>
@@ 行 171: / 行 174: @@
 OVPN_CA="$(openssl x509 -in /etc/openvpn/easy-rsa/pki/ca.crt)"
 NL=$'\n'
-UMASK_BUFF="$(umask)"
-umask u=rw,g=,o=
 grep -l -r -e "TLS Web Client Auth" "/etc/openvpn/easy-rsa/pki/issued" \
 | sed -e "s/^.*\///;s/\.\w*$//" \
@@ 行 180: / 行 181: @@
 OVPN_KEY="$(cat /etc/openvpn/easy-rsa/pki/private/${OVPN_ID}.key)"
 cat << EOF > /etc/openvpn/client-conf/${OVPN_ID}.ovpn
-verb 3
+client
+remote ${OVPN_SERV}
+port 1194
+proto udp
 dev tun
 nobind
-client
-remote ${OVPN_SERV} 1194 udp
 auth-nocache
 remote-cert-tls server
-<tls-crypt>${NL}${OVPN_TC}${NL}</tls-crypt>
+compress lz4-v2
+verb 3
+<tls-auth>${NL}${OVPN_TC}${NL}</tls-auth>
 <ca>${NL}${OVPN_CA}${NL}</ca>
 <cert>${NL}${OVPN_CERT}${NL}</cert>
 <key>${NL}${OVPN_KEY}${NL}</key>
 EOF
+chmod 600 /etc/openvpn/client-conf/${OVPN_ID}.ovpn
 done
-umask $UMASK_BUFF
 ls /etc/openvpn/client-conf/*.ovpn
 </code>
-==== TROUBLE SHOOT ====
-opkg update
-opkg install ipset

openwrt-19/openvpn-server.1580642425.txt.gz · 最終更新: 2020/02/02 20:20 by admin