Bernhard.Linz/openvpn-install
1
0
Fork 0
mirror of https://github.com/angristan/openvpn-install.git synced 2026-07-21 23:08:14 +02:00
Code Issues Projects Releases Wiki Activity
472 Commits 7 Branches 0 Tags
a57f5e69baf8355d2a926180d8176ae52f019f1a
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
StanislasandGitHub a57f5e69ba Debian 10 + armhf = OK (#450) 2019-07-17 18:14:24 +02:00
StanislasandGitHub dea1d6db2b Add support for lz4-v2 (#444) 
Close #366
 2019-07-05 17:49:31 +02:00
StanislasandGitHub 980a483ebc Update FUNDING.yml 2019-07-01 15:05:44 +02:00
StanislasandGitHub b7bbc57284 Create FUNDING.yml 2019-07-01 15:02:17 +02:00
angristan 5844a8440f Add support for Debian 10 
Fix #439
 2019-06-30 23:06:42 +02:00
StanislasandGitHub a34d13adbb Update LICENSE 2019-06-05 01:13:03 +02:00
StanislasandGitHub 7fb9afac3e README: Add link to angristan/wireguard-install 2019-05-14 00:09:44 +02:00
StanislasandGitHub d7a67a60a7 Remove codetriage.com 2019-05-14 00:08:26 +02:00
StanislasandGitHub a0685af1a3 Update mv easy-rsa command 
Maybe fix #420
 2019-05-12 20:59:15 +02:00
StanislasandGitHub 066b48bd84 Add support for Ubuntu 19.04 (#416) 2019-04-22 21:59:04 +02:00
StanislasandGitHub 62cf8c12ab Add codetriage badge 2019-04-03 13:41:42 +02:00
angristan 2e5f9c553d Add Travis CI badge in README 2019-03-06 22:34:39 +01:00
angristan 8cd93d0c91 Remove GitLab-CI 2019-03-06 22:34:28 +01:00
angristan 926aadd1c9 Fix Travis config filename 2019-03-06 22:29:37 +01:00
StanislasandGitHub ba7f91199a Add Travis CI (#404) 2019-03-06 22:25:07 +01:00
angristan 521317714f feat(ISSUE_TEMPLATE): Add link to markdown tutorial 2019-02-26 22:43:59 +01:00
StanislasandGitHub ee35f418be fix(README): endpoint can't be an IPv6 (yet) 2019-02-26 14:51:06 +01:00
StanislasandGitHub 044c032b47 Improve endpoint documentation 2019-02-26 13:56:29 +01:00
StanislasandGitHub 6ec3b5b26f fix(README): automated install 2019-02-26 13:36:25 +01:00
angristan ef37eb64b0 Improve Vagrantfile 2019-02-25 23:44:53 +01:00
StanislasandGitHub 6e402289bd Add Vagrantfile for easier testing (#396) 2019-02-25 23:31:18 +01:00
angristan 52d67286de Fix auto-install 2019-02-25 21:54:36 +01:00
StanislasandGitHub 7ba776ce7a Improve automated install (#395) 
#390 follow up, fixes #261
 2019-02-25 21:30:46 +01:00
angristan c61c695f14 Add link to WireGuard tutorial 2019-01-27 17:33:18 +01:00
angristan db2b818521 Emphasise that I need OpenVPN/OS versions in issues 
Please.
 2019-01-18 14:51:13 +01:00
angristan df4889e49e Do net send me emails or private messages asking for help. 2018-12-15 17:59:06 +01:00
StanislasandGitHub 2f410be73a Create ISSUE_TEMPLATE.md 2018-10-30 17:09:16 +01:00
angristan 7cabdf79c6 Move some questions to the wiki 
https://github.com/angristan/openvpn-install/wiki/FAQ
 2018-10-08 21:25:30 +02:00
angristan 0d19b57e7f Fix iptables-openvpn service on Debian 8 2018-10-08 21:11:52 +02:00
angristan bca57c483d Fix "ping6" and "ping -6" usage 2018-10-01 21:00:26 +02:00
angristan 83b3cd0770 Add CentOS 7/arm64 to compatibility table 2018-09-30 14:09:16 +02:00
angristan 043843850e Improve Debian detection 
e.g. for Raspbian
 2018-09-29 20:15:20 +02:00
angristan ef6c2c2a78 Improve -y usage with package managers 2018-09-27 22:23:40 +02:00
angristan ff2af374f6 Use curl instead of wget in README 
curl is pre-installed more often
 2018-09-27 22:21:19 +02:00
angristan e231c8924a CentOS: Make sure epel-release is installed before openvpn 2018-09-27 22:09:12 +02:00
angristan 9716e868a0 Fix service handling on Ubuntu 16.04 2018-09-27 19:57:01 +02:00
angristan 0648e6a0b7 Fix IPv6 connectivity test 2018-09-27 19:52:52 +02:00
angristan aa17fd9aa3 Add threat models to FAQ 2018-09-26 20:55:27 +02:00
angristan e4a9851b4f Remove revoked client from ifconfig-pool-persist 2018-09-24 15:24:31 +02:00
angristan 0f117352c7 Remove hardcoded ciphers from Fedora systemd service 2018-09-24 14:33:08 +02:00
angristan bbea708175 Do not modify package-provided systemd service 2018-09-24 14:26:41 +02:00
angristan 071baf477f Update link, DNS name 2018-09-24 11:45:12 +02:00
angristan 73c52daf84 Add Quad9 uncensored 2018-09-24 11:42:29 +02:00
angristan 1dad1579ad Better code 2018-09-24 11:37:13 +02:00
angristan 8d5d080cc0 Remove plaintext metadata from client certificate 2018-09-24 11:32:43 +02:00
angristan b0fdb24984 Improve Debian/Ubuntu detection 2018-09-23 22:23:13 +02:00
angristan 70ebe5620d secp256r1 -> prime256v1 2018-09-23 17:06:15 +02:00
angristan 8e1cf382c3 Fix unset usage 2018-09-23 16:33:59 +02:00
angristan 5a67d3b3e7 Fix regex 2018-09-23 16:30:48 +02:00
angristan 463b58f38b Update compatibility table: alphabetical order 2018-09-23 16:29:56 +02:00
angristan 34fd8a2b0a Update compatibility table 2018-09-23 15:21:17 +02:00
angristan 8de3957afb Disable and stop OpenVPN upon removal 2018-09-23 14:32:24 +02:00
angristan 7f35106687 Fix condition 2018-09-23 14:30:08 +02:00
angristan 09b29ddc9c Fix OS condition 2018-09-23 14:26:28 +02:00
angristan ef30d3c9df Fix service on Ubuntu 16.04 2018-09-23 14:25:18 +02:00
angristan e2906fd5e4 Use APT repo for Ubuntu 16.04 
Ubuntu 16.04 has OpenVPN 2.3.10
 2018-09-23 12:47:52 +02:00
angristan 21f15d9aef Little fixes according to OpenVPN 2.4 
Yeah, seconds, really :)
 2018-09-23 00:47:18 +02:00
angristan ba1fc42aac Rewrite README 
Rewrite the encryption part, update with OpenVPN 2.4 stuff, improve FAQ, correct typos
 2018-09-23 00:43:05 +02:00
angristan c2a502be92 Add support for tls-crypt 
Choice between tls-auth/tls-crypt
 2018-09-22 22:34:10 +02:00
angristan f716380080 Fixes 2018-09-22 22:33:25 +02:00
angristan 62c89af954 Support ncp-ciphers 
Since OpenVPN 2.4, there is negotiable crypto parameters (NCP)
It means you can use a cipher suite like with HTTPS. By default the suite is AES-256-GCM:AES-256-CBC, so that means than since 2.4 is out, everyone using a 2.4 client + server was using AES 256 GCM, regardless of the --cipher option. With this commit, the chosen cipher will be the only cipher in the NCP cipher list, thus fixing this issue.
 2018-09-22 18:18:36 +02:00
angristan a85c13e4ec Move setup questions to installQuestions () 2018-09-22 17:59:21 +02:00
angristan bbdabedbec Add --auth choice (HMAC digest algorithm) 2018-09-22 17:54:30 +02:00
angristan e0b4a5aae7 Use read -rp 2018-09-22 16:42:48 +02:00
angristan 3a5e23c5c1 Add ECDH support 2018-09-22 16:41:28 +02:00
angristan cfa5eed6bd Re-add possibility to use a hostname as the endpoint 2018-09-22 16:17:51 +02:00
angristan db6a253676 Improve tests using regex 2018-09-22 15:23:01 +02:00
angristan 4d1baca0c7 Add ECDSA support and make tls-cipher configurable 2018-09-22 15:17:13 +02:00
angristan 06e7597942 Use AES-128-GCM by default 2018-09-22 14:25:30 +02:00
angristan c1b069b501 Fix 10a1d04 2018-09-22 14:23:58 +02:00
angristan 7449bfc550 Remove trailing tabs 2018-09-22 14:21:20 +02:00
angristan 11e023b6dc Use 2048 bits RSA key by default 2018-09-22 14:20:57 +02:00
angristan 10a1d04f3b Add AES GCM support 2018-09-22 14:20:20 +02:00
angristan 36af5ec100 Update DH/RSA defaults 2018-09-22 14:19:51 +02:00
angristan b898a99485 Add compression support 
It is disabled by default.
 2018-09-22 14:08:42 +02:00
angristan 7ed823cdf2 Remove OpenVPN APT repo during removal 2018-09-22 11:41:31 +02:00
angristan c96a71c7d6 Fix OpenVPN repo for Debian 8 2018-09-22 11:40:54 +02:00
angristan 2070e25874 Add pipeline badge to README 2018-09-22 00:26:34 +02:00
angristan c3b00891ba Fix GitLab CI 2018-09-22 00:23:45 +02:00
angristan f44b5ccd2c Add GitLab CI for shellcheck 2018-09-21 23:51:46 +02:00
angristan 80c0b971d6 Improved and safer code 
Thanks to shellcheck!
 2018-09-21 23:48:11 +02:00
angristan ca3198d521 New compatibility table 2018-09-21 22:56:33 +02:00
angristan f09037a099 Update compatibility table: remove CentOS 7/arm64 2018-09-21 22:26:10 +02:00
angristan 76607e781c Sorry... 2018-09-21 22:22:09 +02:00
angristan a0ff4d7cf9 Improve questions for NATed servers 2018-09-21 21:53:39 +02:00
angristan 4144fa9dff Make encryption customization optional 
A lot of people don't know much about cryptography.
Since the script already overwrite OpenVPN's default settings, there is no need for most people to modify them.
 2018-09-21 17:17:41 +02:00
angristan 0a5c3c1401 Rewrite README 2018-09-20 17:16:04 +02:00
StanislasandGitHub e920f7fbc2 Refactoring, cleanup and fixes (#293) 2018-09-20 00:05:02 +02:00
StanislasandGitHub 136a46874e Rework and cleanup systemd service handling (#294) 
* Don't hardcode server.conf in systemd service

* Rework and cleanup service handling
 2018-09-18 14:55:00 +02:00
angristan 1cd80a5cc7 Add Hetzner/IPv6 to FAQ 2018-09-18 14:26:00 +02:00
angristan d3974220ef Fix public interface in iptables rules 2018-09-18 12:37:07 +02:00
angristan 974b80dbc1 Remove unused variables 2018-09-17 18:05:51 +02:00
angristan 6210c64d10 Fix broken link in the README 2018-09-17 01:24:23 +02:00
angristan da909ce13d Add some notes about .ovpn files 2018-09-17 01:23:49 +02:00
StanislasandGitHub 594486c177 Rework iptables handling (#291) 2018-09-17 01:11:30 +02:00
angristan 67feb34446 Merge branch 'sysctl' 2018-09-16 22:50:24 +02:00
angristan 18b025e831 Improve sysctl config 2018-09-16 22:45:04 +02:00
angristan d6d209ef8c Add FAQ: How to manage script updates 2018-09-16 18:11:11 +02:00
StanislasandGitHub bfed14544e Add IPv6 NAT support (#238) 2018-09-16 17:55:50 +02:00
angristan 019da89be9 Update Fedora compatibility 
Remove EOL
 2018-09-16 01:49:39 +02:00