Maximize your protection, eliminate business risks.
Optimize and modernize with cloud transformation.
Empower your people to work securely from anywhere.
Let us handle IT so you can focus on growing your business.
Get multichannel 24/7/365 expert end-user support.
Protect, detect, and respond—Dataprise keeps your business secure.
Maximize uptime with with industry-leading DRaaS.
Swiftly mitigate cyber threats and restore security.
Improve efficiency, productivity and outcomes with cloud.
Ensure all mobile devices, everywhere, are secure.
Gain a competitive edge with strategic IT solutions.
This battle-tested checklist enables your team to swiftly initiate a ransomware response.
IT for businesses of all sizes, in any industry.
Empower institution growth with custom IT solutions.
Ensure your firm is always in compliance.
Improve patient care and staff morale.
Deal with pressing legal matters, not IT.
Keep up with the evolving digital landscape.
Focus on your mission by outsourcing IT.
Accelerate PE client deals and secure data.
Empower Your Municipality with Secure, Reliable IT Services
Execute initiatives and develop IT strategies.
Get the latest industry insights and trends.
Join us at events in person and online.
Hear from clients and learn more about strategic IT.
See how Dataprise can make IT your greatest asset.
Get informative technical resources from IT experts.
Stay on stop of emerging cybersecurity threats.
Discover the key areas of DR your organization needs to address to ensure downtime is minimized.
Gain a strategic asset by bringing harmony to IT.
Ensure 24/7 support and security with dedicated teams.
Drive business forward by partnering with Dataprise.
Meet our one-of-a-kind leadership team.
Discover the recognition Dataprise has earned.
Help us help businesses with strategic IT.
Grow through acquisition and partnership with Dataprise.
Embracing different perspectives and backgrounds.
Find a Dataprise location near you.
Dataprise is committed to empowering more women to consider a career in technology.
Explore our trusted partnerships with leading tech innovators.
Posts
By: Stephanie Hamrick
Table of content
This document describes the process of building an OpenVPN server to facilitate secure remote access to systems. The installation utilizes the base ArchLinux build we posted a few weeks ago.
Ever have the need for a secure VPN into a private network that accommodates simultaneous connections? Need something free that can be setup on any Linux instance? Then this guide is for you!
Looking for more posts like this one? Check out the Networking section of our blog for everything from networking basics to advanced configurations!
Total Download Size: 2.06 MiB Total Installed Size: 7.47 MiB
:: Proceed with installation? [Y/n] Y :: Retrieving packages… lzo-2.10-2-x86_64 81.7 KiB 229K/s 00:00 [######################] 100% nspr-4.21-1-x86_64 189.2 KiB 1051K/s 00:00 [######################] 100% nss-3.43-1-x86_64 1356.9 KiB 2.47M/s 00:01 [######################] 100% pkcs11-helper-1.25…. 65.4 KiB 0.00B/s 00:00 [######################] 100% openvpn-2.4.7-1-x86_64 415.1 KiB 135M/s 00:00 [######################] 100% (5/5) checking keys in keyring [######################] 100% (5/5) checking package integrity [######################] 100% (5/5) loading package files [######################] 100% (5/5) checking for file conflicts [######################] 100% (5/5) checking available disk space [######################] 100% :: Processing package changes… (1/5) installing lzo [######################] 100% (2/5) installing nspr [######################] 100% (3/5) installing nss [######################] 100% (4/5) installing pkcs11-helper [######################] 100% (5/5) installing openvpn [######################] 100% Optional dependencies for openvpn easy-rsa: easy CA and certificate handling pam: authenticate via PAM [installed] :: Running post-transaction hooks… (1/3) Reloading system manager configuration… (2/3) Creating temporary files… (3/3) Arming ConditionNeedsUpdate… [root@Pei-Hq-OpenVPN01 ~]#
Total Download Size: 0.03 MiB Total Installed Size: 0.09 MiB
:: Proceed with installation? [Y/n] Y :: Retrieving packages… easy-rsa-3.0.6-1-any 31.4 KiB 175K/s 00:00 [######################] 100% (1/1) checking keys in keyring [######################] 100% (1/1) checking package integrity [######################] 100% (1/1) loading package files [######################] 100% (1/1) checking for file conflicts [######################] 100% (1/1) checking available disk space [######################] 100% :: Processing package changes… (1/1) installing easy-rsa [######################] 100% :: Running post-transaction hooks… (1/1) Arming ConditionNeedsUpdate… [root@Pei-Hq-OpenVPN01 ~]#
[root@Pei-Hq-OpenVPN01 ~]# cd /etc/easy-rsa/ [root@Pei-Hq-OpenVPN01 easy-rsa]# export EASYRSA=$(pwd) [root@Pei-Hq-OpenVPN01 easy-rsa]# easyrsa init-pki
Note: using Easy-RSA configuration from: /etc/easy-rsa/vars
init-pki complete; you may now create a CA or requests. Your newly created PKI dir is: /etc/easy-rsa/pki
[root@Pei-Hq-OpenVPN01 easy-rsa]# easyrsa build-ca
Using SSL: openssl OpenSSL 1.1.1b 26 Feb 2019Enter New CA Key Passphrase: Re-Enter New CA Key Passphrase: Generating RSA private key, 2048 bit long modulus (2 primes) ………………………………………………………………………………………..+++++ ….+++++ e is 65537 (0x010001) Can’t load /etc/easy-rsa/pki/.rnd into RNG 140348830196224:error:2406F079:random number generator:RAND_load_file:Cannot open file:crypto/rand/randfile.c:98:Filename=/etc/easy-rsa/pki/.rnd You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter ‘.’, the field will be left blank. –— Common Name (eg: your user, host, or server name) [Easy-RSA CA]:Pei-Hq-OpenVPN01
CA creation complete and you may now import and sign cert requests. Your new CA certificate file for publishing is at: /etc/easy-rsa/pki/ca.crt
[root@Pei-Hq-OpenVPN01 easy-rsa]# easyrsa gen-req Pei-Hq-OpenVPN01 nopass
Using SSL: openssl OpenSSL 1.1.1b 26 Feb 2019 Generating a RSA private key …………….+++++ ………….+++++ writing new private key to ‘/etc/easy-rsa/pki/private/Pei-Hq-OpenVPN01.key.x69qZvOmH6’ –— You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter ‘.’, the field will be left blank. –— Common Name (eg: your user, host, or server name) [Pei-Hq-OpenVPN01]:
Keypair and certificate request completed. Your files are: req: /etc/easy-rsa/pki/reqs/Pei-Hq-OpenVPN01.req key: /etc/easy-rsa/pki/private/Pei-Hq-OpenVPN01.key
[root@Pei-Hq-OpenVPN01 easy-rsa]# easyrsa sign-req server Pei-Hq-OpenVPN01
Using SSL: openssl OpenSSL 1.1.1b 26 Feb 2019
You are about to sign the following certificate. Please check over the details shown below for accuracy. Note that this request has not been cryptographically verified. Please be sure it came from a trusted source or that you have verified the request checksum with the sender.
Request subject, to be signed as a server certificate for 1080 days:
subject= commonName = Pei-Hq-OpenVPN01 Type the word ‘yes’ to continue, or any other input to abort. Confirm request details: yes Using configuration from /etc/easy-rsa/pki/safessl-easyrsa.cnf Enter pass phrase for /etc/easy-rsa/pki/private/ca.key: Check that the request matches the signature Signature ok The Subject’s Distinguished Name is as follows commonName :ASN.1 12:’Pei-Hq-OpenVPN01′ Certificate is to be certified until Mar 12 22:47:19 2022 GMT (1080 days)
Write out database with 1 new entries Data Base Updated
Certificate created at: /etc/easy-rsa/pki/issued/Pei-Hq-OpenVPN01.crt
[root@Pei-Hq-OpenVPN01]# cd /etc/easy-rsa [root@Pei-Hq-OpenVPN01 easy-rsa]# echo "n" | easyrsa gen-req client1 nopass Using SSL: openssl OpenSSL 1.1.1b 26 Feb 2019 Generating a RSA private key ......+++++ ..................+++++ writing new private key to '/etc/easy-rsa/pki/private/client1.key.CIlCoYEmpv' --— You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. --— Common Name (eg: your user, host, or server name) [client1]: Keypair and certificate request completed. Your files are: req: /etc/easy-rsa/pki/reqs/client1.req key: /etc/easy-rsa/pki/private/client1.key
client dev tun proto udp remote 192.168.222.100 1194 resolv-retry infinite nobind user nobody group nobody persist-key persist-tun ca /etc/openvpn/server/ca.crt cert /etc/openvpn/client/client1.crt key /etc/openvpn/client/client1.key remote-cert-tls server cipher AES-256-CBC auth SHA512 tls-auth /etc/openvpn/client/ta.key 1 verb 4 mute 20
mfuller, PEILooking for more posts like this one? Check out the Networking section of our blog for everything from networking basics to advanced configurations!
INSIGHTS
Subscribe to our blog to learn about the latest IT trends and technology best practices.