This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
пакет_openvpn [2022/06/09 09:38] val [Использование PAM аутентификации вместо клиентских сертификатов] |
пакет_openvpn [2022/06/14 17:17] val [Настройка с использованием клиентских сертификатов] |
||
---|---|---|---|
Line 42: | Line 42: | ||
dh /etc/openvpn/dh2048.pem | dh /etc/openvpn/dh2048.pem | ||
+ | |||
ca /etc/ssl/certs/ca.crt | ca /etc/ssl/certs/ca.crt | ||
crl-verify /etc/ssl/certs/ca.crl | crl-verify /etc/ssl/certs/ca.crl | ||
cert /etc/ssl/certs/gate.crt | cert /etc/ssl/certs/gate.crt | ||
key /etc/ssl/private/gate.key | key /etc/ssl/private/gate.key | ||
+ | |||
status /var/log/openvpn1-status.log | status /var/log/openvpn1-status.log | ||
</code> | </code> | ||
- | Тестирование конфигурации | + | === Тестирование конфигурации === |
<code> | <code> | ||
# openvpn --config /etc/openvpn/openvpn1.conf | # openvpn --config /etc/openvpn/openvpn1.conf | ||
+ | |||
+ | # timeout 5 openvpn --config /etc/openvpn/openvpn1.conf; test $? -eq 124 && echo OK | ||
</code> | </code> | ||
- | Включение и запуск | + | === Включение и запуск === |
<code> | <code> | ||
Line 102: | Line 106: | ||
* [[https://www.linuxsysadmintutorials.com/setup-pam-authentication-with-openvpns-auth-pam-module|Setup PAM authentication with OpenVPN's auth-pam module]] | * [[https://www.linuxsysadmintutorials.com/setup-pam-authentication-with-openvpns-auth-pam-module|Setup PAM authentication with OpenVPN's auth-pam module]] | ||
* [[https://github.com/OpenVPN/openvpn/tree/master/src/plugins/auth-pam|openvpn/src/plugins/auth-pam/]] | * [[https://github.com/OpenVPN/openvpn/tree/master/src/plugins/auth-pam|openvpn/src/plugins/auth-pam/]] | ||
+ | * [[https://openvpn.net/community-resources/using-alternative-authentication-methods/|OpenVPN Using alternative authentication methods]] | ||
* [[Пакет OpenSSL#Создание самоподписанного сертификата]] | * [[Пакет OpenSSL#Создание самоподписанного сертификата]] |