2013-05-14 12:04:19 +00:00
##openvpn-install
2015-02-11 18:51:19 +00:00
OpenVPN [road warrior ](http://en.wikipedia.org/wiki/Road_warrior_%28computing%29 ) installer for Debian, Ubuntu and CentOS.
2013-05-14 12:04:19 +00:00
2015-02-11 18:51:19 +00:00
This script will let you setup your own VPN server in no more than a minute, even if you haven't used OpenVPN before. It isn't bulletproof but has been designed to be as unobtrusive and universal as possible.
2013-05-14 12:04:19 +00:00
2016-03-13 14:41:05 +00:00
##Fork
2016-03-08 22:16:52 +00:00
This fork includes :
- no logs
- TLS 1.2 only
2016-03-09 22:01:25 +00:00
- AES-128-GCM encryption (instead of BF-CBC)
2016-03-13 20:51:50 +00:00
- Legacy version for less hardened encryption
2016-03-09 20:13:12 +00:00
- 4096 bits DH (instead of 2048 bits)
2016-03-08 22:51:02 +00:00
- [FDN's DNS Servers ](http://www.fdn.fr/actions/dns/ )
2016-03-09 15:46:56 +00:00
- Every feature of the [original script ](https://github.com/Nyr/openvpn-install ) (I check periodically to sync the latest commits from source)
2016-03-08 22:16:52 +00:00
2016-03-13 14:41:05 +00:00
##Installation
To check your OpenVPN version, use `openvpn --version`
2016-03-13 19:02:32 +00:00
If your server **and** your client have OpenVPN 2.3.3 or higher, use *latest* . If your server **or** your client have OpenVPN 2.3.2 or lower, use *legacy* .
2016-03-13 14:41:05 +00:00
2016-03-13 14:53:09 +00:00
I made two versions to make sure you can get the best encryption possible, but also to support most devices as possible.
2016-03-13 19:02:32 +00:00
###Latest (OpenVPN > 2.3.3)
2016-03-13 14:41:05 +00:00
It will work for :
- Debian 8
- Ubuntu 15.10
2016-03-13 21:33:29 +00:00
- CentOS 6, 7
2016-03-13 14:41:05 +00:00
2013-05-14 12:04:19 +00:00
Run the script and follow the assistant:
2015-12-25 21:20:59 +00:00
```
2016-03-13 14:41:05 +00:00
wget --no-check-certificate https://raw.githubusercontent.com/Angristan/OpenVPN-install-nyr/master/openvpn-install.sh
2015-12-25 21:20:59 +00:00
chmod +x openvpn-install.sh
2015-12-25 21:21:31 +00:00
./openvpn-install.sh
```
2013-05-14 12:04:19 +00:00
2016-03-13 19:02:32 +00:00
###Legacy (OpenVPN < 2.3.2)
2016-03-13 14:41:05 +00:00
2016-03-13 19:02:32 +00:00
It's the same script as *latest* , but with TLS 1.0 instead of TLS 1.2 and AES-256-CBC instead of AES-128-GCM. (OpenVPN 2.3.2 and lower doesn't support `tls-min` and `tls-cipher` )
2016-03-13 14:53:09 +00:00
Other features are still included.
2016-03-13 14:41:05 +00:00
It will work for :
- Debian 7
2016-03-13 19:15:06 +00:00
- Ubuntu 12.04 LTS, 14.04 LTS
2016-03-13 14:41:05 +00:00
Run the script and follow the assistant:
```
wget --no-check-certificate https://raw.githubusercontent.com/Angristan/OpenVPN-install-nyr/master/openvpn-install-legacy.sh
chmod +x openvpn-install-legacy.sh
./openvpn-install-legacy.sh
```
2014-12-10 22:31:04 +00:00
Once it ends, you can run it again to add more users, remove some of them or even completely uninstall OpenVPN.
2016-01-01 12:53:28 +00:00
2016-03-13 16:54:12 +00:00
You can get a little VPS for just 1.49€/month at [PulseHeberg ](http://manager.pulseheberg.com/aff.php?aff=1204 ).
2016-01-01 12:53:28 +00:00
## Licence
2016-03-13 14:41:05 +00:00
Based on the work of [Nyr ](https://github.com/Nyr/openvpn-install )
2016-01-01 12:53:46 +00:00
[MIT Licence ](https://raw.githubusercontent.com/Angristan/openvpn-install-nyr/master/LICENSE )