Browse Source

Upload files to '4. VPN'

master
AndreasNefeli 3 years ago
parent
commit
16732a1e5c
  1. 111
      4. VPN/User1.ovpn
  2. 6
      4. VPN/create_user.sh
  3. 22
      4. VPN/rm_user.sh
  4. 2
      4. VPN/show_vpnUsers.sh

111
4. VPN/User1.ovpn

@ -0,0 +1,111 @@
client
nobind
dev tun
comp-lzo
resolv-retry infinite
keepalive 15 60
remote-cert-tls server
remote 192.168.1.13 1194 udp
float
<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
</key>
<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
key-direction 1
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
de4f6e2397b6c1e496a203dfe8dfcc84
88ce9721348425790df84143e2f2e737
8cb7b53984bfee4d0bddfd12061efe82
ba7af7cfd49f2f99ff1beef5b45c89c0
800f410a4b1be52635152a9c2ba21f29
926d49cda539d9e29ebf35bf26ab40e6
c52bf23397b673a60cacda7e915d3fed
b2ad40d14fb58fcadec029e843868635
c4c0c2cd3c9d0d4f5f035ea174c39566
193365c3745eadca33b0743d2d3c67d8
eff74e57f99df258130782fc5622f76a
5a27af8dff510cbac77054959b98821e
e23cea375d59c16b0e23fab5d8ae3e11
6da6359ec571122e1bdc3e49a940aeea
d358f93928b6b36eaed8afa5dac160d6
3a2bbba147ce67bf523724b7ce275389
-----END OpenVPN Static key V1-----
</tls-auth>

6
4. VPN/create_user.sh

@ -0,0 +1,6 @@
USERNAME=User1
vpn_data=$PWD/openvpn-services/
docker=registry.vlabs.uniwa.gr:5080/myownvpn
docker run -v $vpn_data:/etc/openvpn --rm -it $docker easyrsa build-client-full $USERNAME nopass
docker run -v $vpn_data:/etc/openvpn --log-driver=none --rm $docker ovpn_getclient $USERNAME > $USERNAME.ovpn

22
4. VPN/rm_user.sh

@ -0,0 +1,22 @@
#!/bin/bash
CLIENTNAME=test1
U=$CLIENTNAME
vpn_data=$PWD/openvpn-services/
docker=registry.vlabs.uniwa.gr:5080/myownvpn
rm -f $vpn_data/pki/reqs/$CLIENTNAME.req
rm -f $vpn_data/pki/private/$CLIENTNAME.key
rm -f $vpn_data/pki/issued/$CLIENTNAME.crt
rm -f $vpn_data/server/ccd/$CLIENTNAME
rm -f $vpn_data/ccd/$CLIENTNAME
pem=$(sudo grep "CN=$U$" $vpn_data/pki/index.txt | cut -f4)
rm -f $vpn_data/pki/certs_by_serial/$pem.pem
sed -i "/CN=$U$/d" $vpn_data/pki/index.txt
echo $pem
docker run -v $vpn_data:/etc/openvpn --log-driver=none --rm -it $docker ovpn_revokeclient $CLIENTNAME remove
rm -f $vpn_data_user_config/$CLIENTNAME.ovpn
rm -f $vpn_data_user_config1/$CLIENTNAME.ovpn

2
4. VPN/show_vpnUsers.sh

@ -0,0 +1,2 @@
NAME=swarmlab-vpn-services # name of docker service
docker exec -it $NAME ovpn_listclients
Loading…
Cancel
Save