Debian
Debian-France
Debian-Facile
Debian-fr.org
Forum-Debian.fr
Debian ?
Communautés
Vous n'êtes pas identifié(e).
L'icône rouge permet de télécharger chaque page du wiki visitée au format
PDF et la grise au format ODT →
Ci-dessous, les différences entre deux révisions de la page.
| Les deux révisions précédentes Révision précédente Prochaine révision | Révision précédente Prochaine révision Les deux révisions suivantes | ||
|
doc:reseau:vpn:openvpn [22/12/2016 18:21] kawer |
doc:reseau:vpn:openvpn [31/12/2016 11:17] kawer |
||
|---|---|---|---|
| Ligne 163: | Ligne 163: | ||
| <code> | <code> | ||
| - | Fri May 27 15:41:06 2016 OpenVPN 2.3.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Nov 12 2015 | + | Thu Dec 22 18:27:00 2016 OpenVPN 2.3.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Nov 12 2015 |
| - | Fri May 27 15:41:06 2016 library versions: OpenSSL 1.0.1k 8 Jan 2015, LZO 2.08 | + | Thu Dec 22 18:27:00 2016 library versions: OpenSSL 1.0.1t 3 May 2016, LZO 2.08 |
| - | Fri May 27 15:41:06 2016 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts | + | Thu Dec 22 18:27:00 2016 Diffie-Hellman initialized with 2048 bit key |
| - | Fri May 27 15:41:06 2016 Diffie-Hellman initialized with 2048 bit key | + | Thu Dec 22 18:27:00 2016 Socket Buffers: R=[212992->131072] S=[212992->131072] |
| - | Fri May 27 15:41:06 2016 Socket Buffers: R=[229376->131072] S=[229376->131072] | + | Thu Dec 22 18:27:00 2016 ROUTE_GATEWAY 213.32.16.1 |
| - | Fri May 27 15:41:06 2016 ROUTE_GATEWAY 92.222.64.1 | + | Thu Dec 22 18:27:00 2016 TUN/TAP device tun0 opened |
| - | Fri May 27 15:41:06 2016 TUN/TAP device tun0 opened | + | Thu Dec 22 18:27:00 2016 TUN/TAP TX queue length set to 100 |
| - | Fri May 27 15:41:06 2016 TUN/TAP TX queue length set to 100 | + | Thu Dec 22 18:27:00 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 |
| - | Fri May 27 15:41:06 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 | + | Thu Dec 22 18:27:00 2016 /sbin/ip link set dev tun0 up mtu 1500 |
| - | Fri May 27 15:41:06 2016 /sbin/ip link set dev tun0 up mtu 1500 | + | Thu Dec 22 18:27:00 2016 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2 |
| - | Fri May 27 15:41:06 2016 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2 | + | Thu Dec 22 18:27:00 2016 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2 |
| - | Fri May 27 15:41:06 2016 /etc/openvpn/update-resolv-conf tun0 1500 1542 10.8.0.1 10.8.0.2 init | + | Thu Dec 22 18:27:00 2016 GID set to nogroup |
| - | Fri May 27 15:41:06 2016 /sbin/ip route add 10.8.0.0/24 via 10.8.0.2 | + | Thu Dec 22 18:27:00 2016 UID set to nobody |
| - | Fri May 27 15:41:06 2016 GID set to nogroup | + | Thu Dec 22 18:27:00 2016 UDPv4 link local (bound): [undef] |
| - | Fri May 27 15:41:06 2016 UID set to nobody | + | Thu Dec 22 18:27:00 2016 UDPv4 link remote: [undef] |
| - | Fri May 27 15:41:06 2016 UDPv4 link local (bound): [undef] | + | Thu Dec 22 18:27:00 2016 MULTI: multi_init called, r=256 v=256 |
| - | Fri May 27 15:41:06 2016 UDPv4 link remote: [undef] | + | Thu Dec 22 18:27:00 2016 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0 |
| - | Fri May 27 15:41:06 2016 MULTI: multi_init called, r=256 v=256 | + | Thu Dec 22 18:27:00 2016 IFCONFIG POOL LIST |
| - | Fri May 27 15:41:06 2016 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0 | + | Thu Dec 22 18:27:00 2016 Initialization Sequence Completed |
| - | Fri May 27 15:41:06 2016 IFCONFIG POOL LIST | + | |
| - | Fri May 27 15:41:06 2016 Initialization Sequence Completed | + | |
| </code> | </code> | ||
| <code user>ifconfig tun0</code> | <code user>ifconfig tun0</code> | ||
| Ligne 274: | Ligne 272: | ||
| </code> | </code> | ||
| - | === Sur le poste client === | + | == On récupère les certificats sur le serveur : == |
| + | **Récupérer les fichiers suivant dans /etc/openvpn/easy-rsa/keys/:** | ||
| + | [[doc:reseau:scp|scp : transfert de fichiers sécurisé entre machines]] | ||
| - | == On récupère les certificats sur le serveur : == | + | <code>/etc/openvpn/easy-rsa/keys/ca.crt</code> |
| - | + | <code>/etc/openvpn/easy-rsa/keys/clientCert.key</code> | |
| - | scp root@serveur:/etc/openvpn/easy-rsa/keys/ca.crt /tmp | + | <code>/etc/openvpn/easy-rsa/keys/clientCert.crt</code> |
| - | scp root@serveur:/etc/openvpn/easy-rsa/keys/clientCert.crt /tmp | + | |
| - | scp root@serveur:/etc/openvpn/easy-rsa/keys/clientCert.key /tmp | + | |
| + | === Sur le poste client === | ||
| ==On installe openvpn :== | ==On installe openvpn :== | ||
| Ligne 294: | Ligne 293: | ||
| <code root>mkdir -p keys</code> | <code root>mkdir -p keys</code> | ||
| <code root>cd keys</code> | <code root>cd keys</code> | ||
| - | <code root>cp /tmp/ca.crt .</code> | + | |
| - | <code root>cp /tmp/clientCert.key .</code> | + | **Coller dans le dossiers en cours (keys) les fichiers suivants :** |
| - | <code root>cp /tmp/clientCert.crt .</code> | + | |
| + | <code>ca.crt</code> | ||
| + | <code>clientCert.key</code> | ||
| + | <code>clientCert.crt</code> | ||
| == Modification du fichier de configuration == | == Modification du fichier de configuration == | ||
