Guo Yunhe
bbf93a19d5
Add openSUSE Tumbleweed/Leap support ( #1166 )
...
<!---
❗ ️ Please read ❗ ️
➡️ Please make sure you've followed the guidelines:
https://github.com/angristan/openvpn-install#contributing
✅ Please make sure your changes are tested and working
🗣️ Please avoid large PRs, and discuss changes in a GitHub issue first
✋ If the changes are too big and not in line with the project, they will
probably be rejected. Remember that this script is meant to be simple
and easy to use.
--->
---------
Co-authored-by: Stanislas Lange <git@slange.me >
2025-12-11 21:22:12 +01:00
Leo Wang
77a025d042
Improve wording of README ( #1134 )
...
I know I’m setting up open VPN because google gave me this page, but I
wasn’t sure if I should run this script on my Amazon Linux 2 server or
my MacBook Pro client for a hot minute.
<!---
❗ ️ Please read ❗ ️
➡️ Please make sure you've followed the guidelines:
https://github.com/angristan/openvpn-install#contributing
✅ Please make sure your changes are tested and working
🗣️ Please avoid large PRs, and discuss changes in a GitHub issue first
✋ If the changes are too big and not in line with the project, they will
probably be rejected. Remember that this script is meant to be simple
and easy to use.
--->
---------
Co-authored-by: Stanislas <github@slange.me >
2025-12-11 13:58:40 +01:00
Stanislas Lange
e06329c770
docs: update README to include Amazon Linux in supported distributions
2025-12-11 13:49:05 +01:00
Stanislas
0f324ef3b9
docs: add "Why OpenVPN?" section to README ( #1341 )
...
- Add a new "Why OpenVPN?" section explaining when OpenVPN is preferable
over WireGuard
- Move the wireguard-install link from the intro to this new section
2025-12-11 13:45:53 +01:00
renovate[bot]
1aae852c60
chore(deps): update super-linter/super-linter action to v8 ( #1339 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[super-linter/super-linter](https://redirect.github.com/super-linter/super-linter )
| action | major | `v7` -> `v8` |
---
### Release Notes
<details>
<summary>super-linter/super-linter (super-linter/super-linter)</summary>
###
[`v8`](https://redirect.github.com/super-linter/super-linter/blob/HEAD/CHANGELOG.md#680-2024-07-31 )
[Compare
Source](https://redirect.github.com/super-linter/super-linter/compare/v7...v8 )
##### 🚀 Features
- allow using both prettier and standardjs
([#​5679](https://redirect.github.com/super-linter/super-linter/issues/5679 ))
([2daf461](2daf461143https://redirect.github.com/super-linter/super-linter/issues/5940 ))
([20c4df5](20c4df58c0https://redirect.github.com/super-linter/super-linter/issues/5868 ))
([c770a8d](c770a8d253https://redirect.github.com/super-linter/super-linter/issues/5809 ))
([5be4926](5be4926633https://redirect.github.com/super-linter/super-linter/issues/5688 )
- write github actions step summary
([#​5867](https://redirect.github.com/super-linter/super-linter/issues/5867 ))
([57c8658](57c86588c3https://redirect.github.com/super-linter/super-linter/issues/5650 )
##### 🐛 Bugfixes
- avoid duplicated content in summary
([#​5939](https://redirect.github.com/super-linter/super-linter/issues/5939 ))
([ef57e13](ef57e132e1https://redirect.github.com/super-linter/super-linter/issues/5899 ))
([78ed3ef](78ed3ef5fchttps://redirect.github.com/super-linter/super-linter/issues/5927 ))
([eec862d](eec862d0eahttps://redirect.github.com/super-linter/super-linter/issues/5870 ))
([6bd7659](6bd76596f3⬆️ Dependency updates
- **bundler:** bump rubocop-minitest in /dependencies
([#​5875](https://redirect.github.com/super-linter/super-linter/issues/5875 ))
([9751e62](9751e62beehttps://redirect.github.com/super-linter/super-linter/issues/5777 ))
([763dcc4](763dcc4d45https://redirect.github.com/super-linter/super-linter/issues/5878 ))
([592d903](592d903c50https://redirect.github.com/super-linter/super-linter/issues/5872 ))
([587fe0a](587fe0a8b9https://redirect.github.com/super-linter/super-linter/issues/5754 ))
([6bb3f78](6bb3f789bbhttps://redirect.github.com/super-linter/super-linter/issues/5882 ))
([b5bf9f2](b5bf9f297dhttps://redirect.github.com/super-linter/super-linter/issues/5883 ))
([95feeac](95feeacb0ahttps://redirect.github.com/super-linter/super-linter/issues/5764 ))
([b75f1cf](b75f1cfcefhttps://redirect.github.com/super-linter/super-linter/issues/5873 ))
([f068663](f06866359bhttps://redirect.github.com/super-linter/super-linter/issues/5748 ))
([81ab76d](81ab76d001https://redirect.github.com/super-linter/super-linter/issues/5881 ))
([d84d439](d84d439393https://redirect.github.com/super-linter/super-linter/issues/5885 ))
([d384e67](d384e674c7https://redirect.github.com/super-linter/super-linter/issues/5856 ))
([81196f4](81196f4267https://redirect.github.com/super-linter/super-linter/issues/5884 ))
([8a044b5](8a044b58dehttps://redirect.github.com/super-linter/super-linter/issues/5765 ))
([4931da5](4931da55dahttps://redirect.github.com/super-linter/super-linter/issues/5858 ))
([ae1dba5](ae1dba53fdhttps://redirect.github.com/super-linter/super-linter/issues/5857 ))
([913bd0d](913bd0dd47https://redirect.github.com/super-linter/super-linter/issues/5768 ))
([33bb4b4](33bb4b46d4https://redirect.github.com/super-linter/super-linter/issues/5861 ))
([ed72e66](ed72e66416https://redirect.github.com/super-linter/super-linter/issues/5860 ))
([dd4313c](dd4313c9b3https://redirect.github.com/super-linter/super-linter/issues/5770 ))
([27170b8](27170b8e92https://redirect.github.com/super-linter/super-linter/issues/5849 ))
([19c5fce](19c5fcea2ehttps://redirect.github.com/babel/eslint-parser )
in /dependencies
([#​5886](https://redirect.github.com/super-linter/super-linter/issues/5886 ))
([387a2b5](387a2b5626https://redirect.github.com/babel/preset-react )
in /dependencies
([#​5740](https://redirect.github.com/super-linter/super-linter/issues/5740 ))
([4eeb628](4eeb62862ehttps://redirect.github.com/babel/preset-typescript )
in /dependencies
([#​5734](https://redirect.github.com/super-linter/super-linter/issues/5734 ))
([de4b193](de4b193006https://redirect.github.com/react-native/eslint-config )
in /dependencies
([#​5835](https://redirect.github.com/super-linter/super-linter/issues/5835 ))
([28c228d](28c228dfc0https://redirect.github.com/typescript-eslint/eslint-plugin )
in /dependencies
([#​5895](https://redirect.github.com/super-linter/super-linter/issues/5895 ))
([7f5b018](7f5b018fb7https://redirect.github.com/super-linter/super-linter/issues/5738 ))
([1312398](1312398b9chttps://redirect.github.com/super-linter/super-linter/issues/5797 ))
([8972772](8972772732https://redirect.github.com/super-linter/super-linter/issues/5890 ))
([fe3e1f8](fe3e1f83b7https://redirect.github.com/super-linter/super-linter/issues/5851 ))
([c2e85a9](c2e85a9f03https://redirect.github.com/super-linter/super-linter/issues/5852 ))
([042c6b1](042c6b1917https://redirect.github.com/super-linter/super-linter/issues/5887 ))
([22b7ba9](22b7ba91d0https://redirect.github.com/super-linter/super-linter/issues/5891 ))
([b601212](b6012126dfhttps://redirect.github.com/super-linter/super-linter/issues/5897 ))
([ef71e94](ef71e944abhttps://redirect.github.com/super-linter/super-linter/issues/5896 ))
([09a01eb](09a01ebbe6https://redirect.github.com/super-linter/super-linter/issues/5853 ))
([55b065d](55b065d3c2https://redirect.github.com/super-linter/super-linter/issues/5832 ))
([8605c2b](8605c2b584https://redirect.github.com/super-linter/super-linter/issues/5877 ))
([e90ee32](e90ee328a2https://redirect.github.com/super-linter/super-linter/issues/5876 ))
([ebf8cc8](ebf8cc807ahttps://redirect.github.com/super-linter/super-linter/issues/5879 ))
([47392ad](47392ad663https://redirect.github.com/super-linter/super-linter/issues/5780 ))
([f019ee3](f019ee34d2https://redirect.github.com/super-linter/super-linter/issues/5880 ))
([3fd69a1](3fd69a107bhttps://redirect.github.com/super-linter/super-linter/issues/5874 ))
([2b6aa12](2b6aa12906https://redirect.github.com/super-linter/super-linter/issues/5847 ))
([31da61e](31da61e189🧰 Maintenance
- add super-linter configuration in the bug template
([#​5910](https://redirect.github.com/super-linter/super-linter/issues/5910 ))
([26ddd8b](26ddd8b084https://redirect.github.com/super-linter/super-linter/issues/5894 ))
([cc20e45](cc20e4561ehttps://redirect.github.com/super-linter/super-linter/issues/5863 ))
([d9d1909](d9d19095echttps://redirect.github.com/super-linter/super-linter/issues/5871 ))
([12da497](12da4973c6https://redirect.github.com/super-linter/super-linter/issues/5862 ))
([fc094cc](fc094cc1a4https://redirect.github.com/super-linter/super-linter/issues/5869 ))
([bcf8ca8](bcf8ca82adhttps://redirect.github.com/super-linter/super-linter/issues/5928 ))
([70e0239](70e0239117https://redirect.github.com/super-linter/super-linter/issues/5864 ))
([ce59f5c](ce59f5c323https://redirect.github.com/super-linter/super-linter/issues/5892 ))
([d2d7334](d2d73347d3https://redirect.github.com/super-linter/super-linter/issues/5898 ))
([e374e48](e374e48933https://redirect.github.com/super-linter/super-linter/issues/5901 ))
([2ecf945](2ecf945339📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/angristan/openvpn-install ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi40Mi4yIiwidXBkYXRlZEluVmVyIjoiNDIuNDIuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Stanislas Lange <git@slange.me >
2025-12-11 11:12:00 +01:00
Stanislas
2ecd4bd6e4
feat: add Data Channel Offload (DCO) availability check ( #1331 )
...
- Add detection and logging for OpenVPN Data Channel Offload (DCO)
support during installation
- DCO is a kernel acceleration feature (merged into Linux 6.16) that
improves VPN performance
- Add DCO documentation to README
2025-12-10 18:53:45 +01:00
Stanislas
b9a1650027
feat: drop Amazon Linux 2 support ( #1332 )
...
## Summary
- Remove Amazon Linux 2 support from the installer
- Amazon Linux 2023 remains fully supported
## Motivation
Amazon Linux 2 is reaching EOL.
Additionally, Amazon Linux 2 ships with **OpenSSL 1.0.2k** (from 2017)
which is incompatible with Easy-RSA 3.2.x. The newer Easy-RSA versions
use `openssl x509 -ext` which doesn't exist in OpenSSL 1.0.x, causing
certificate generation to fail.
This blocks our ability to upgrade Easy-RSA:
bda450948a
2025-12-10 17:54:00 +01:00
Stanislas
c0fcf91972
feat: add ChaCha20-Poly1305 cipher support ( #1330 )
...
## Summary
- Add `CHACHA20-POLY1305` as a data channel cipher option
- Add `ECDHE-*-CHACHA20-POLY1305` control channel cipher options
- Add version check (requires OpenVPN 2.5+)
- Update README documentation
ChaCha20-Poly1305 is particularly useful on devices without hardware AES
acceleration (AES-NI), such as ARM-based devices (Raspberry Pi, etc.)
and older CPUs, where it can provide better performance than AES.
Closes #1244 Closes #190
2025-12-10 00:11:25 +01:00
Stanislas
ffcffac061
refactor: improve certificate duration variable naming ( #1329 )
...
## Summary
- Rename constants to `DEFAULT_CERT_VALIDITY_DURATION_DAYS` and
`DEFAULT_CRL_VALIDITY_DURATION_DAYS` for clarity
- Replace all hardcoded `3650` values with the constants
- Split `DAYS_VALID` into `CLIENT_CERT_DURATION_DAYS` and
`SERVER_CERT_DURATION_DAYS` for more granular control over client vs
server certificate validity
- Increase CRL validity to 15 years (5475 days) to provide a 5-year
safety buffer over the default 10-year certificate validity
- Update README with new headless install variables
## Breaking changes
- `DAYS_VALID` environment variable is replaced by
`CLIENT_CERT_DURATION_DAYS` and `SERVER_CERT_DURATION_DAYS`
2025-12-09 23:33:57 +01:00
Stanislas Lange
f9a544104e
docs: add missing headless variables to README
...
Add MULTI_CLIENT and DAYS_VALID to the documented headless install
variables, matching what the script actually supports.
2025-12-09 21:55:36 +01:00
Stanislas
6b09270347
feat: add certificate renewal functionality ( #1328 )
...
## Summary
- Add certificate renewal for both client and server certificates
- Allow custom validity period during renewal (prompts user, defaults to
3650 days)
- Show expiry info inline in menus (e.g., "Renew the server certificate
(expires in 3542 days)")
- Regenerate `.ovpn` files after client renewal
- Restart OpenVPN service after server renewal
- Extract reusable helper functions to reduce code duplication
- Add robust input validation and error handling
## New menu option
```
What do you want to do?
1) Add a new user
2) Revoke existing user
3) Renew certificate ← NEW
4) Remove OpenVPN
5) Exit
```
## Renewal submenu
```
What do you want to renew?
1) Renew a client certificate
2) Renew the server certificate (expires in 3542 days)
3) Back to main menu
```
Client list shows expiry for each:
```
Select the existing client certificate you want to renew
1) alice (expires in 3542 days)
2) bob (expires in 30 days)
3) charlie (EXPIRED 5 days ago)
```
## Helper functions added
Extracted common code into reusable functions:
- `getHomeDir()` - home directory detection
- `regenerateCRL()` - CRL regeneration after cert changes
- `generateClientConfig()` - .ovpn file generation
- `selectClient()` - client listing with optional expiry display
- `getDaysUntilExpiry()` - certificate expiry calculation
- `formatExpiry()` - human-readable expiry formatting
## Test plan
- [x] Client certificate renewal tested in Docker CI
- [x] Server certificate renewal tested in Docker CI
- [x] Certificate validity verified after renewal (~3650 days)
- [x] VPN connectivity tested with renewed certificate
Closes #974 #1002 #1228 #1060
2025-12-09 21:49:19 +01:00
Stanislas
8bd0c73f8f
Use official OpenVPN repositories for latest stable versions ( #1323 )
...
## Summary
- Install OpenVPN from official upstream repositories instead of
distribution packages
- Gets the latest stable releases with security fixes and new features
- Properly cleans up repos and GPG keys on uninstall
## Repository sources
| OS | Repository |
|---|---|
| Debian/Ubuntu | `build.openvpn.net/debian/openvpn/stable` |
| CentOS/Oracle/Fedora | Fedora Copr `@OpenVPN/openvpn-release-2.6` |
| Amazon Linux/Arch | Distribution packages (no official repo available)
|
## Changes
- Add `installOpenVPNRepo()` function to configure official repos before
package installation
- Remove duplicate package installations between repo setup and install
functions
- Clean up repos and GPG keys during uninstall
- Standardize `log_success` (`[OK]`) for major milestones only
---
Close https://github.com/angristan/openvpn-install/pull/1294
2025-12-09 19:45:56 +01:00
Stanislas Lange
cd0fc55bf7
docs: add duplicate-cn feature to README
2025-12-09 18:15:54 +01:00
Stanislas Lange
adc4c6d220
Remove cloud provisioning solutions section from README
...
I don't maintain them, so I can't vouch that they work.
Close https://github.com/angristan/openvpn-install/pull/934 as well
2025-12-09 15:02:49 +01:00
Stanislas
a3389c126c
Add Docker-based E2E testing ( #1320 )
...
### Summary
- Add automated end-to-end testing using Docker to verify the installation script works across 18 Linux distributions
- Add Oracle Linux 9 support to the installation script
- Drop support for EOL distributions (Debian 8/9/10, CentOS 7, Ubuntu 16.04)
- Disable Digital Ocean droplets based end-to-end tests, let's use docker from now on
### Changes
**New test infrastructure:**
- `test/Dockerfile.server` - Multi-OS server image with `BASE_IMAGE` build arg
- `test/Dockerfile.client` - Ubuntu 24.04 client for connectivity testing
- `test/server-entrypoint.sh` - Runs install script, verifies files exist, asserts iptables NAT rules, starts OpenVPN
- `test/client-entrypoint.sh` - Connects to VPN, verifies tun0 interface, pings gateway
- `docker-compose.yml` - Orchestrates server + client with shared volume
- `.github/workflows/docker-test.yml` - CI matrix testing 18 OS variants
- `.github/workflows/test.yml` - Removed push/PR triggers, now manual only for DO tests
- `Makefile` - Local testing commands (`make test`, `make test-ubuntu-24.04`, etc.)
**Distributions tested (18 total):**
| Family | Versions |
|--------|----------|
| Ubuntu | 18.04, 20.04, 22.04, 24.04 |
| Debian | 11, 12 |
| Fedora | 40, 41 |
| Rocky Linux | 8, 9 |
| AlmaLinux | 8, 9 |
| Oracle Linux | 8, 9 |
| Amazon Linux | 2, 2023 |
| CentOS Stream | 9 |
| Arch Linux | latest |
2025-12-07 12:27:41 +01:00
Stanislas Lange
46a295b538
docs: update security section note for OpenVPN 2.5+
...
Replace the warning about outdated documentation with a note
clarifying that TLS 1.2 is kept as minimum for client compatibility
while acknowledging OpenVPN 2.5+ features.
2025-12-04 23:04:11 +01:00
Stanislas Lange
bf31e0ca64
docs: fix broken workflow link (push.yml -> lint.yml)
...
The workflow file was renamed but the README link was not updated.
2025-12-04 23:04:11 +01:00
Stanislas Lange
7e32f6ae83
Fix mermaid diagram in README
2025-03-15 22:52:11 +01:00
Blake Fleischer
399c3c87b9
Add support for Amazon Linux 2023 out of the box ( #1259 )
...
Co-authored-by: Stanislas Lange <git@slange.me >
2025-03-10 10:24:45 +01:00
Stanislas Lange
e2d4990ae1
Improve README
2025-01-06 17:25:26 +01:00
Stanislas Lange
dc114f3243
Update distribution matrix for end-to-end tests
2024-11-07 20:49:42 +01:00
Stanislas Lange
5a4b31bd0d
Fix typo in README
2023-11-20 21:21:56 +01:00
Stanislas Lange
80feebed16
Remove visitors badge
2023-01-22 16:43:13 +01:00
Stanislas Lange
d096f7a3a2
Add star history
2023-01-22 16:42:48 +01:00
Stanislas Lange
33fe6af131
Update cloud providers
2023-01-22 01:55:06 +01:00
Stanislas Lange
d2556ff235
Add support for CentOS 9 + update supported distributions
2023-01-22 00:57:40 +01:00
Stanislas Lange
0ac1bf4f51
Format markdown table in readme
2023-01-21 23:41:03 +01:00
Stanislas Lange
64cbbce0b7
Add OpenVPN 2.5 notice to README
2023-01-21 23:40:01 +01:00
Stanislas Lange
2d0eca1a1d
Update issue/PR template + contributing guidelines
2023-01-21 23:06:44 +01:00
Adiyat Mubarak
deb5867979
Update README.md OpenVPN client for macOS
2022-08-02 10:16:42 +02:00
Stanislas
c2059d684d
Add SayThanks badge
2022-01-31 01:40:10 +01:00
Stanislas
fdc3f25987
Fix saythanks URL in README
2022-01-31 01:36:59 +01:00
Paul Marsicovetere
fa123bede7
Add openvpn-ephemeral Terraform module to README ( #881 )
2021-10-18 10:44:45 +02:00
James Lee
8783719459
Add support for AlmaLinux 8 ( #891 )
2021-08-27 15:24:53 +02:00
Stanislas
bcd1d8a53e
Document Rocky Linux support
2021-07-06 10:56:15 +02:00
Stanislas
b9deadef61
readme: remove broken hall of fame
2021-05-31 02:00:33 +02:00
rvva
bfdf48c392
Add support for Oracle Linux 8 ( #810 )
...
Co-authored-by: Stanislas <stanislas.lange@pm.me >
2021-03-22 10:48:15 +01:00
Stanislas Lange
e16d93f314
readme: update provider link
2020-10-28 18:58:51 +01:00
Stanislas
bd047c08d7
ci: use super-linter ( #683 )
2020-10-21 13:59:49 +02:00
Stanislas
4eb349bf10
readme: update badge
2020-10-19 12:05:08 +02:00
Stanislas
cb23f0ec24
Add badge to README
2020-10-02 21:29:20 +02:00
Stanislas Lange
9579e29ccf
Update provider links
2020-07-30 12:44:57 +02:00
randomshell
5c2a86f27e
Update distro compatibility list and remove Debian 8 support ( #654 )
2020-07-28 12:24:57 +02:00
randomshell
bbd29a8178
Update easy-rsa link in README to 3.0.7
2020-07-02 20:04:26 +00:00
robiiinos
b11296870f
Typo in README
2020-06-27 12:29:43 +02:00
Shubham
b2888fa514
readme: fix typo ( #664 )
2020-05-15 22:06:18 +02:00
Stanislas
6ee5787a29
Add contributors hall-of-fame
2020-05-10 22:27:57 +02:00
Stanislas
83f70fe71f
ci(workflow): run script in headless mode on VMs ( #643 )
...
Run script in headless mode on all supported distributions, on Digital Ocean VMs, with GitHub Actions
2020-04-28 11:26:24 +02:00
Stanislas Lange
87bfd046dd
docs(readme): fix english punctuation
2020-04-27 15:42:47 +02:00
Stanislas Lange
af3bf12bb6
style(readme): format markdown
2020-04-27 15:31:36 +02:00
