Forum: TOMATO VPN GUI konfiguracja

client
dev tun

proto udp
#(usuń niepotrzebne)
remote 9999 #dla stałego IP
remote przyklad.dontexist.org 9999 #dla zmiennego IP

nobind

persist-key
persist-tun

mute-replay-warnings

ca ca.crt
cert przyklad1.crt
key przyklad1.key
ns-cert-type server
tls-auth ta.key

cipher BF-CBC
comp-lzo
verb 3
mute 20

#!/bin/sh

generuj_hash() {
echo "Generating HASH for"
echo "$1:$2"
HASH=`echo -n $1$2 | md5sum | sed s'/\ -//'`
j=0
while [ $j != 10 ] do
HASH=`echo -n $HASH$HASH | md5sum | sed s'/\ -//'`
j=`expr $j + 1`
done
echo "HASH:$HASH"
}

uzycie(){
echo "$0 [user] [password]"
exit 1
}

if [ $# != 2 ] then
uzycie
fi

generuj_hash $1 $2

#!/bin/sh

# Wczytujemy plik z nazwami uzytkownikow i zaszyfrowanymi haslami
# Ma on postac: login1:password1\n
#    login2:password2
USERS=`cat /jffs/openvpn/users_file`

vpn_verify() {
#skrypt musi przyjac 2 argumenty
if [[ ! $1 ]] || [[ ! $2 ]] then
exit 1
fi

for i in $USERS; do
#szukamy nazwy uzytkownika w linii z pliku
#jesli jest wartosc tego porownania wieksza od zera
if [ `expr match "$i" $1` -gt 0 ] then
   HASH=`echo -n $1$2 | md5sum | sed s'/\ -//'`
   j=0
   while [ $j != 10 ] do
   HASH=`echo -n $HASH$HASH | md5sum | sed s'/\ -//'`
   j=`expr $j + 1`
   done

   if [ `expr match "$i" $1:$HASH` -gt 0 ] then
   exit 0
   else
   exit 1
   fi
fi
done
}

#do skryptu przychodzi tylko nazwa pliku z /tmp
if [[ ! $1 ]] || [[ ! -e $1 ]] then
exit 1
fi

#wyswietlamy plik w nim dopiero argumenty
vpn_verify `cat $1`

exit 1

client
dev tun

proto udp

remote 83.112.18.10 62094

nobind

persist-key
persist-tun

mute-replay-warnings

ca ca.crt
cert nowytarg.crt
key nowytarg.key
ns-cert-type server
tls-auth pk.key

cipher BF-CBC
comp-lzo
verb 3
mute 20

Kod Pobierz kod źródłowy

Fri Aug 06 19:06:03 2010 OpenVPN 2.1.1 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Dec 11 2009

Fri Aug 06 19:06:03 2010 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables

Fri Aug 06 19:06:04 2010 Control Channel Authentication: using 'pk.key' as a OpenVPN static key file

Fri Aug 06 19:06:04 2010 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

Fri Aug 06 19:06:04 2010 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

Fri Aug 06 19:06:04 2010 LZO compression initialized

Fri Aug 06 19:06:04 2010 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]

Fri Aug 06 19:06:04 2010 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]

Fri Aug 06 19:06:04 2010 Local Options hash (VER=V4): '02af3434'

Fri Aug 06 19:06:04 2010 Expected Remote Options hash (VER=V4): '3f08d474'

Fri Aug 06 19:06:04 2010 Socket Buffers: R=[8192->8192] S=[8192->8192]

Fri Aug 06 19:06:04 2010 UDPv4 link local: [undef]

Fri Aug 06 19:06:04 2010 UDPv4 link remote: 83.26.127.111:62094

Fri Aug 06 19:06:49 2010 TLS: Initial packet from 83.26.127.111:62094, sid=104a04e3 8e2fc8ad

Fri Aug 06 19:06:50 2010 VERIFY OK: depth=1, /C=PL/ST=MALOPOLSKA/L=Krakow/O=PK/CN=PK_CA/emailAddress=pk@email.pl

Fri Aug 06 19:06:50 2010 VERIFY OK: nsCertType=SERVER

Fri Aug 06 19:06:50 2010 VERIFY OK: depth=0, /C=PL/ST=MALOPOLSKA/L=Krakow/O=PK/CN=server/emailAddress=pk@email.pl

Fri Aug 06 19:06:51 2010 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key

Fri Aug 06 19:06:51 2010 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

Fri Aug 06 19:06:51 2010 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key

Fri Aug 06 19:06:51 2010 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

Fri Aug 06 19:06:51 2010 Control Channel: TLSv1, cipher TLSv1/SSLv3 EDH-RSA-DES-CBC3-SHA, 1024 bit RSA

Fri Aug 06 19:06:51 2010 [server] Peer Connection Initiated with 83.26.127.111:62094

Fri Aug 06 19:06:54 2010 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)

Fri Aug 06 19:06:54 2010 PUSH: Received control message: 'PUSH_REPLY,route 192.168.0.0 255.255.255.0,route 172.30.30.1,topology net30,ping 15,ping-restart 60,ifconfig 172.30.30.6 172.30.30.5'

Fri Aug 06 19:06:54 2010 OPTIONS IMPORT: timers and/or timeouts modified

Fri Aug 06 19:06:54 2010 OPTIONS IMPORT: --ifconfig/up options modified

Fri Aug 06 19:06:54 2010 OPTIONS IMPORT: route options modified

Fri Aug 06 19:06:54 2010 ROUTE default_gateway=212.244.210.97

Fri Aug 06 19:06:54 2010 TAP-WIN32 device [Połączenie lokalne] opened: \\.\Global\{5B5858D2-26B9-4FB7-889F-5E6B2B007C54}.tap

Fri Aug 06 19:06:54 2010 TAP-Win32 Driver Version 9.6 

Fri Aug 06 19:06:54 2010 TAP-Win32 MTU=1500

Fri Aug 06 19:06:54 2010 Notified TAP-Win32 driver to set a DHCP IP/netmask of 172.30.30.6/255.255.255.252 on interface {5B5858D2-26B9-4FB7-889F-5E6B2B007C54} [DHCP-serv: 172.30.30.5, lease-time: 31536000]

Fri Aug 06 19:06:54 2010 Successful ARP Flush on interface [3] {5B5858D2-26B9-4FB7-889F-5E6B2B007C54}

Fri Aug 06 19:06:59 2010 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up

Fri Aug 06 19:06:59 2010 C:\WINDOWS\system32\route.exe ADD 192.168.0.0 MASK 255.255.255.0 172.30.30.5

Fri Aug 06 19:06:59 2010 Route addition via IPAPI succeeded [adaptive]

Fri Aug 06 19:06:59 2010 C:\WINDOWS\system32\route.exe ADD 172.30.30.1 MASK 255.255.255.255 172.30.30.5

Fri Aug 06 19:06:59 2010 Route addition via IPAPI succeeded [adaptive]

Fri Aug 06 19:06:59 2010 Initialization Sequence Completed