2.5 KiB
##openvpn-install OpenVPN road warrior installer for Debian, Ubuntu and CentOS.
This script will let you setup your own VPN server in no more than a minute, even if you haven't used OpenVPN before. It isn't bulletproof but has been designed to be as unobtrusive and universal as possible.
##Fork This fork includes :
- no logs
- TLS 1.2 only
- AES-128-GCM encryption (instead of BF-CBC)
- Legacy version for less hardened encryption
- 4096 bits DH (instead of 2048 bits)
- FDN's DNS Servers
- Every feature of the original script (I check periodically to sync the latest commits from source)
##Installation
Run the script and follow the assistant:
wget --no-check-certificate https://raw.githubusercontent.com/Angristan/OpenVPN-install-nyr/master/openvpn-install.sh
chmod +x openvpn-install.sh
./openvpn-install.sh
Once it ends, you can run it again to add more users, remove some of them or even completely uninstall OpenVPN.
##Variants
When you will launch the script, you will be asked to choose the variant of the script you want to use.
To check your OpenVPN version, use openvpn --version
If your server and your client have OpenVPN 2.3.3 or higher, use latest. If your server or your client have OpenVPN 2.3.2 or lower, use legacy.
I made two versions to make sure you can get the best encryption possible, but also to support most devices as possible.
###Latest (OpenVPN > 2.3.3)
It will work for :
- Debian 8
- Ubuntu 15.10
- CentOS 6
- CentOS 7
- All recent clients with OpenVPN 2.3.3 or higher
###Legacy (OpenVPN < 2.3.2)
It's the same script as latest, but with TLS 1.0 instead of TLS 1.2 and AES-256-CBC instead of AES-128-GCM. (OpenVPN 2.3.2 and lower doesn't support tls-min and tls-cipher)
Other features are still included.
The following Operating Systems are only supported by the legacy variant :
- Debian 7
- Ubuntu 12.04 LTS
- Ubuntu 14.04 LTS
- Ubuntu 15.04
- All older clients with OpenVPN 2.3.2 or lower (it could be NAS devices, routers, etc)
If your server and/or your client does not support OpenVPN 2.3.3 or higher, you should use legacy.
You can get a high speed VPS in 14 locations around the world at Vultr. (Sign up for 5$ free credit !)
Licence
Based on the work of Nyr