angristan
e2906fd5e4
Use APT repo for Ubuntu 16.04
...
Ubuntu 16.04 has OpenVPN 2.3.10
2018-09-23 12:47:52 +02:00
angristan
21f15d9aef
Little fixes according to OpenVPN 2.4
...
Yeah, seconds, really :)
2018-09-23 00:47:18 +02:00
angristan
c2a502be92
Add support for tls-crypt
...
Choice between tls-auth/tls-crypt
2018-09-22 22:34:10 +02:00
angristan
f716380080
Fixes
2018-09-22 22:33:25 +02:00
angristan
62c89af954
Support ncp-ciphers
...
Since OpenVPN 2.4, there is negotiable crypto parameters (NCP)
It means you can use a cipher suite like with HTTPS. By default the suite is AES-256-GCM:AES-256-CBC, so that means than since 2.4 is out, everyone using a 2.4 client + server was using AES 256 GCM, regardless of the --cipher option. With this commit, the chosen cipher will be the only cipher in the NCP cipher list, thus fixing this issue.
2018-09-22 18:18:36 +02:00
angristan
a85c13e4ec
Move setup questions to installQuestions ()
2018-09-22 17:59:21 +02:00
angristan
bbdabedbec
Add --auth choice (HMAC digest algorithm)
2018-09-22 17:54:30 +02:00
angristan
e0b4a5aae7
Use read -rp
2018-09-22 16:42:48 +02:00
angristan
3a5e23c5c1
Add ECDH support
2018-09-22 16:41:28 +02:00
angristan
cfa5eed6bd
Re-add possibility to use a hostname as the endpoint
2018-09-22 16:17:51 +02:00
angristan
db6a253676
Improve tests using regex
2018-09-22 15:23:01 +02:00
angristan
4d1baca0c7
Add ECDSA support and make tls-cipher configurable
2018-09-22 15:17:13 +02:00
angristan
06e7597942
Use AES-128-GCM by default
2018-09-22 14:25:30 +02:00
angristan
c1b069b501
Fix 10a1d04
2018-09-22 14:23:58 +02:00
angristan
7449bfc550
Remove trailing tabs
2018-09-22 14:21:20 +02:00
angristan
11e023b6dc
Use 2048 bits RSA key by default
2018-09-22 14:20:57 +02:00
angristan
10a1d04f3b
Add AES GCM support
2018-09-22 14:20:20 +02:00
angristan
36af5ec100
Update DH/RSA defaults
2018-09-22 14:19:51 +02:00
angristan
b898a99485
Add compression support
...
It is disabled by default.
2018-09-22 14:08:42 +02:00
angristan
7ed823cdf2
Remove OpenVPN APT repo during removal
2018-09-22 11:41:31 +02:00
angristan
c96a71c7d6
Fix OpenVPN repo for Debian 8
2018-09-22 11:40:54 +02:00
angristan
80c0b971d6
Improved and safer code
...
Thanks to shellcheck!
2018-09-21 23:48:11 +02:00
angristan
76607e781c
Sorry...
2018-09-21 22:22:09 +02:00
angristan
a0ff4d7cf9
Improve questions for NATed servers
2018-09-21 21:53:39 +02:00
angristan
4144fa9dff
Make encryption customization optional
...
A lot of people don't know much about cryptography.
Since the script already overwrite OpenVPN's default settings, there is no need for most people to modify them.
2018-09-21 17:17:41 +02:00
xiagw
0f67214490
Improve Debian/Ubuntu version checking ( #187 )
2018-09-20 22:00:16 +02:00
angristan
0a5c3c1401
Rewrite README
2018-09-20 17:16:04 +02:00
Stanislas
e920f7fbc2
Refactoring, cleanup and fixes ( #293 )
2018-09-20 00:05:02 +02:00
Stanislas
136a46874e
Rework and cleanup systemd service handling ( #294 )
...
* Don't hardcode server.conf in systemd service
* Rework and cleanup service handling
2018-09-18 14:55:00 +02:00
angristan
d3974220ef
Fix public interface in iptables rules
2018-09-18 12:37:07 +02:00
angristan
974b80dbc1
Remove unused variables
2018-09-17 18:05:51 +02:00
Stanislas
594486c177
Rework iptables handling ( #291 )
2018-09-17 01:11:30 +02:00
angristan
18b025e831
Improve sysctl config
2018-09-16 22:45:04 +02:00
Stanislas
bfed14544e
Add IPv6 NAT support ( #238 )
2018-09-16 17:55:50 +02:00
angristan
f6c9a63e38
Drop support for Arch Linux
...
Arch Linux isn't very used and is not available on cloud providers. I cannot test it easily so it is a burden to maintain for me
2018-09-16 01:34:01 +02:00
angristan
8a5de575b7
Drop Debian 7 support
...
Debian 7 is EOL and I can't test it on cloud providers anymore
2018-09-16 01:29:04 +02:00
angristan
3209441775
Better bash
2018-09-16 01:26:37 +02:00
angristan
62380c512b
Drop CentOS 6 support
2018-09-16 01:26:30 +02:00
randomshell
f057e0aa5f
Add self-hosted DNS resolver (Unbound)
2018-09-16 00:53:33 +02:00
angristan
4bf4257cf3
Merge two mv commands
2018-09-05 20:26:33 +02:00
angristan
2997a7e8b6
Remove "|| return"
2018-09-05 20:20:46 +02:00
angristan
ea40b45b52
Fix /dev/urandom usage on unprivileged LXC containers
...
Fixes https://github.com/angristan/openvpn-install/issues/280
2018-09-02 22:32:58 +02:00
Angristan
64f62cf874
Remove log-append for now and create log dir
...
See https://github.com/Angristan/OpenVPN-install/issues/275
2018-08-23 00:40:36 +02:00
Angristan
d8d0bbb5da
Add access logs (log-append)
...
And move log files to /var/log/openvpn. Makes more sense and access logs can be very useful.
2018-08-22 22:11:36 +02:00
Angristan
1b18e7f2a7
Re-add a default suggestion for the client name
...
But only during the setup, not for additional clients
2018-08-18 21:47:10 +02:00
Angristan
47c86874dc
Update check on the client's name input
2018-08-18 19:55:36 +02:00
Angristan
9ef0bbc47d
Add password option for clients ( #160 )
2018-08-18 19:40:07 +02:00
Jebtrix
df172b962d
Add option to generate random port in private port range ( #229 )
2018-08-18 15:57:24 +02:00
Sayem Chowdhury
5501de73c8
Improved code ( #243 )
2018-07-15 11:25:59 +02:00
cezar97
63ac18075d
Add quad9 secondary DNS ( #248 )
...
See https://www.quad9.net/faq/#Is_there_a_service_that_Quad9_offers_that_does_not_have_the_blocklist_or_other_security .
2018-07-06 22:11:22 +02:00
