Bernhard.Linz/openvpn-install
1
0
Fork 0
mirror of https://github.com/angristan/openvpn-install.git synced 2024-11-22 16:59:03 +01:00
Code Issues Projects Releases Wiki Activity
146 Commits 5 Branches 0 Tags 4.4 MiB
2fe0fa2062
Commit Graph

146 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
jtbr
2fe0fa2062 Allow forwarding using either SNAT or MASQUERADE (as required by some setups) 2016-04-12 10:05:28 +00:00
jtbr
f376ce912f Support ios openvpn connect using CBC, SHA128 tls-cipher. Update readme. 2016-04-12 09:38:14 +00:00
jtbr
a65523eb1c this time actually fix the quoting issue for ip option 3 2016-04-10 19:45:33 +02:00
jtbr
b3fb14bcb4 enable tls-auth and perfect forwarding secrecy 2016-04-10 18:53:29 +02:00
jtbr
d844154a45 run openvpn unprivileged 2016-04-10 18:36:15 +02:00
jtbr
01003c88f8 fix dns option 3 with single quotes 2016-04-10 18:26:49 +02:00
Angristan
a3519c6fa3 update link 2016-04-03 18:55:58 +02:00
Angristan
b94597fdcc Update README.md 2016-03-27 01:27:47 +01:00
Angristan
6480c8fbf3 Merge pull request #2 from Harvester57/master 
Remove old fix about buffers
 2016-03-22 18:14:10 +01:00
Florian STOSSE
9aeb5b7c47 Remove old fix 
This fix was intended to overcome hardcoded buffers values in old OpenVPN revisions (see https://www.lowendtalk.com/discussion/40099/why-openvpn-is-so-slow-cool-story). This is not needed anymore, as OpenVPN now use OS buffers (see https://community.openvpn.net/openvpn/ticket/461 and https://community.openvpn.net/openvpn/changeset/c72dbb8b470ab7b25fc74e41aed4212db48a9d2f/). It should lead to better performances over fast networks.

Signed-off-by: Florian STOSSE <contact@harvester.fr>
 2016-03-22 11:47:24 +01:00
Angristan
6b4c00c394 Clarification for NAT 2016-03-21 21:43:34 +01:00
Angristan
a44539c571 Update README.md 2016-03-21 18:36:08 +01:00
Angristan
0f21c29afa Update README.md 2016-03-21 18:34:09 +01:00
Angristan
21d8f78f4f Disable compression 2016-03-21 17:43:48 +01:00
Angristan
651b7c29d9 Merge pull request #1 from Harvester57/patch-1 
Disable compression
 2016-03-21 17:42:08 +01:00
Harvester
bf97d67f26 Revert ciphers 
My bad !
 2016-03-21 17:13:36 +01:00
Harvester
787784058a Disable compression client-side too 2016-03-21 16:18:18 +01:00
Florian Stosse
064c5bfe4a Typo 
OpenVPN doesn't really like the way it was written
 2016-03-21 13:30:17 +01:00
Florian Stosse
1a73a20240 Also change tls-cipher for clients 2016-03-21 13:26:37 +01:00
Florian Stosse
b15cd6cf81 Add more than one cipogers to tls-cipher 
Just in case we need to fallback or downgrade
 2016-03-21 13:20:35 +01:00
Florian Stosse
8b89b1743c Disable compression 
For a hardened OpenVPN configuration, compression should be disabled : https://github.com/BetterCrypto/Applied-Crypto-Hardening/pull/91#issuecomment-75388575
 2016-03-21 13:13:57 +01:00
Angristan
faaa48d372 Fix ca-certificates errors 2016-03-19 22:51:00 +01:00
Angristan
1bf105e809 The BIG update 
Deleted latest and legacy mode
Use OpenVPN 2.3.10 with custom repo
Add a check at start for Debian/Ubuntu
Fast mode with 2048 bits RSA and DH, 128 bits AES, SHA-256 certificate
Slow mode with 4096 bits RSA and DH, 256 bits AES, SHA-384 certificate
AES-256-CBC and SHA512 for HMAC auth
Add OpenNIC as a DNS option + GeoIP API
Delete NTT and Huricane Electric DNS
Other improvements
 2016-03-19 17:41:18 +01:00
Angristan
25448611c2 The BIG update 2016-03-19 17:38:34 +01:00
Angristan
0667668937 Update README.md 2016-03-16 16:21:11 +01:00
Angristan
3897bc32ff Update README.md 2016-03-15 21:37:58 +01:00
Angristan
e5ce2da2ee Update README.md 2016-03-15 21:36:05 +01:00
Angristan
f94a2a736d Delete openvpn-install-legacy.sh 
157c27512a
 2016-03-15 20:19:18 +01:00
Angristan
157c27512a Combine latest and legacy version 2016-03-15 19:11:35 +01:00
Angristan
f5ebe9d01d Fix which bug on CentOS 7 minimal 
7fb12dc5cb
 2016-03-14 21:38:40 +01:00
Angristan
4fef7869d9 Fix which bug on CentOS 7 minimal 
7fb12dc5cb
 2016-03-14 21:37:14 +01:00
Angristan
7694be3672 TAP is not needed 2016-03-14 21:27:18 +01:00
Angristan
1be02be239 TAP is not needed 2016-03-14 21:22:08 +01:00
Angristan
a658d8d04b Clear up supported OS 2016-03-14 21:20:03 +01:00
Angristan
27b6247d0f Add Ubuntu 15.04 to legacy 2016-03-14 21:18:03 +01:00
Angristan
cbc7abc3dd Clarifies that it supports Scaleway NATed servers 2016-03-14 18:03:02 +01:00
Angristan
2c7d211b04 Clarifies that it supports Scaleway NATed servers 2016-03-14 18:02:01 +01:00
Angristan
f815715c45 Update README.md 2016-03-13 22:33:29 +01:00
Angristan
3546f8b63a Fix typo 2016-03-13 21:51:50 +01:00
Angristan
eea2e86557 Fix typo 2016-03-13 21:51:31 +01:00
Angristan
bcb5daa6c9 Add feature 2016-03-13 21:50:54 +01:00
Angristan
88f550fb9a Not compatible with Fedora 2016-03-13 21:18:46 +01:00
Angristan
9bd9dabafa Revert changes 2016-03-13 20:47:39 +01:00
Angristan
48252378ff Revert changes 2016-03-13 20:47:18 +01:00
Angristan
beb61502fa Add support for Fedora 2016-03-13 20:15:06 +01:00
Angristan
3b49c12f2c Update version : latest is only for 2.3.3 and higher 2016-03-13 20:02:32 +01:00
Angristan
b8c7775ca7 Add support for Fedora 20 2016-03-13 19:46:58 +01:00
Angristan
90a4bdb63e Install which on CentOS 2016-03-13 19:28:49 +01:00
Angristan
f49f187de2 Install which 2016-03-13 19:21:58 +01:00
Angristan
59dc02a8bd Add CentOS 6 support 2016-03-13 18:48:13 +01:00