453 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
angristan	21f15d9aef	Little fixes according to OpenVPN 2.4 ... Yeah, seconds, really :)	2018-09-23 00:47:18 +02:00
angristan	ba1fc42aac	Rewrite README ... Rewrite the encryption part, update with OpenVPN 2.4 stuff, improve FAQ, correct typos	2018-09-23 00:43:05 +02:00
angristan	c2a502be92	Add support for tls-crypt ... Choice between tls-auth/tls-crypt	2018-09-22 22:34:10 +02:00
angristan	f716380080	Fixes	2018-09-22 22:33:25 +02:00
angristan	62c89af954	Support ncp-ciphers ... Since OpenVPN 2.4, there is negotiable crypto parameters (NCP) It means you can use a cipher suite like with HTTPS. By default the suite is AES-256-GCM:AES-256-CBC, so that means than since 2.4 is out, everyone using a 2.4 client + server was using AES 256 GCM, regardless of the --cipher option. With this commit, the chosen cipher will be the only cipher in the NCP cipher list, thus fixing this issue.	2018-09-22 18:18:36 +02:00
angristan	a85c13e4ec	Move setup questions to installQuestions ()	2018-09-22 17:59:21 +02:00
angristan	bbdabedbec	Add --auth choice (HMAC digest algorithm)	2018-09-22 17:54:30 +02:00
angristan	e0b4a5aae7	Use read -rp	2018-09-22 16:42:48 +02:00
angristan	3a5e23c5c1	Add ECDH support	2018-09-22 16:41:28 +02:00
angristan	cfa5eed6bd	Re-add possibility to use a hostname as the endpoint	2018-09-22 16:17:51 +02:00
angristan	db6a253676	Improve tests using regex	2018-09-22 15:23:01 +02:00
angristan	4d1baca0c7	Add ECDSA support and make tls-cipher configurable	2018-09-22 15:17:13 +02:00
angristan	06e7597942	Use AES-128-GCM by default	2018-09-22 14:25:30 +02:00
angristan	c1b069b501	Fix 10a1d04	2018-09-22 14:23:58 +02:00
angristan	7449bfc550	Remove trailing tabs	2018-09-22 14:21:20 +02:00
angristan	11e023b6dc	Use 2048 bits RSA key by default	2018-09-22 14:20:57 +02:00
angristan	10a1d04f3b	Add AES GCM support	2018-09-22 14:20:20 +02:00
angristan	36af5ec100	Update DH/RSA defaults	2018-09-22 14:19:51 +02:00
angristan	b898a99485	Add compression support ... It is disabled by default.	2018-09-22 14:08:42 +02:00
angristan	7ed823cdf2	Remove OpenVPN APT repo during removal	2018-09-22 11:41:31 +02:00
angristan	c96a71c7d6	Fix OpenVPN repo for Debian 8	2018-09-22 11:40:54 +02:00
angristan	2070e25874	Add pipeline badge to README	2018-09-22 00:26:34 +02:00
angristan	c3b00891ba	Fix GitLab CI	2018-09-22 00:23:45 +02:00
angristan	f44b5ccd2c	Add GitLab CI for shellcheck	2018-09-21 23:51:46 +02:00
angristan	80c0b971d6	Improved and safer code ... Thanks to shellcheck!	2018-09-21 23:48:11 +02:00
angristan	ca3198d521	New compatibility table	2018-09-21 22:56:33 +02:00
angristan	f09037a099	Update compatibility table: remove CentOS 7/arm64	2018-09-21 22:26:10 +02:00
angristan	76607e781c	Sorry...	2018-09-21 22:22:09 +02:00
angristan	a0ff4d7cf9	Improve questions for NATed servers	2018-09-21 21:53:39 +02:00
angristan	4144fa9dff	Make encryption customization optional ... A lot of people don't know much about cryptography. Since the script already overwrite OpenVPN's default settings, there is no need for most people to modify them.	2018-09-21 17:17:41 +02:00
xiagw	0f67214490	Improve Debian/Ubuntu version checking (#187)	2018-09-20 22:00:16 +02:00
angristan	0a5c3c1401	Rewrite README	2018-09-20 17:16:04 +02:00
Stanislas	e920f7fbc2	Refactoring, cleanup and fixes (#293)	2018-09-20 00:05:02 +02:00
Stanislas	136a46874e	Rework and cleanup systemd service handling (#294) ... * Don't hardcode server.conf in systemd service * Rework and cleanup service handling	2018-09-18 14:55:00 +02:00
angristan	1cd80a5cc7	Add Hetzner/IPv6 to FAQ	2018-09-18 14:26:00 +02:00
angristan	d3974220ef	Fix public interface in iptables rules	2018-09-18 12:37:07 +02:00
angristan	974b80dbc1	Remove unused variables	2018-09-17 18:05:51 +02:00
angristan	6210c64d10	Fix broken link in the README	2018-09-17 01:24:23 +02:00
angristan	da909ce13d	Add some notes about .ovpn files	2018-09-17 01:23:49 +02:00
Stanislas	594486c177	Rework iptables handling (#291)	2018-09-17 01:11:30 +02:00
angristan	67feb34446	Merge branch 'sysctl'	2018-09-16 22:50:24 +02:00
angristan	18b025e831	Improve sysctl config	2018-09-16 22:45:04 +02:00
angristan	d6d209ef8c	Add FAQ: How to manage script updates	2018-09-16 18:11:11 +02:00
Stanislas	bfed14544e	Add IPv6 NAT support (#238)	2018-09-16 17:55:50 +02:00
angristan	019da89be9	Update Fedora compatibility ... Remove EOL	2018-09-16 01:49:39 +02:00
angristan	f6c9a63e38	Drop support for Arch Linux ... Arch Linux isn't very used and is not available on cloud providers. I cannot test it easily so it is a burden to maintain for me	2018-09-16 01:34:01 +02:00
angristan	8a5de575b7	Drop Debian 7 support ... Debian 7 is EOL and I can't test it on cloud providers anymore	2018-09-16 01:29:04 +02:00
angristan	3209441775	Better bash	2018-09-16 01:26:37 +02:00
angristan	62380c512b	Drop CentOS 6 support	2018-09-16 01:26:30 +02:00
randomshell	f057e0aa5f	Add self-hosted DNS resolver (Unbound)	2018-09-16 00:53:33 +02:00