C:\Program Files\OpenVPN\easy-rsa>vars.bat [Enter]

C:\Program Files\OpenVPN\easy-rsa>build-key.bat klient1 [Enter]

Loading 'screen' into random state - done

Generating a 1024 bit RSA private key

...........................++++++

....++++++

writing new private key to 'keys\klient1.key'

-----

You are about to be asked to enter information that will be incorporated

into your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN.

There are quite a few fields but you can leave some blank

For some fields there will be a default value,

If you enter '.', the field will be left blank.

-----

Country Name (2 letter code) [PL]: [Enter]

State or Province Name (full name) [PL]: [Enter]

Locality Name (eg, city) [Torun]: [Enter]

Organization Name (eg, company) [Moja_firma]: [Enter]

Organizational Unit Name (eg, section) []:moj_oddzial [Enter]

Common Name (eg, your name or your server's hostname) []:server [Enter]

Email Address [admin@host.domena]: [Enter]



Please enter the following 'extra' attributes

to be sent with your certificate request

A challenge password []:moje_haslo [Enter]

An optional company name []:[Enter]

Using configuration from openssl.cnf

Loading 'screen' into random state - done

DEBUG[load_index]: unique_subject = "yes"

Check that the request matches the signature

Signature ok

The Subject's Distinguished Name is as follows

countryName           :PRINTABLE:'PL'

stateOrProvinceName   :PRINTABLE:'PL'

localityName          :PRINTABLE:'Torun'

organizationName      :T61STRING:'Moja_firma'

organizationalUnitName:T61STRING:'moj_oddzial'

commonName            :PRINTABLE:'server'

emailAddress          :IA5STRING:'admin@host.domena'

Certificate is to be certified until Nov 20 19:50:24 2017 GMT (3650 days)

Sign the certificate? [y/n]:y [Enter]

insmod tun.o

cd /tmp

openvpn --mktun --dev tap0

brctl addif br0 tap0

ifconfig tap0 0.0.0.0 promisc up



echo "

# Tunnel options

mode server # Set OpenVPN major mode

proto tcp-server # Setup the protocol (server)

port 1194 # TCP/UDP port number

dev tap0 # TUN/TAP virtual network device

keepalive 15 60 # Simplify the expression of --ping

daemon # Become a daemon after all initialization

verb 3 # Set output verbosity to n

comp-lzo # Use fast LZO compression

management 192.168.2.1 7505 pass.txt



# OpenVPN server mode options

client-to-client # tells OpenVPN to internally route client-to-client traffic

duplicate-cn # Allow multiple clients with the same common name



# TLS Mode Options

tls-server # Enable TLS and assume server role during TLS handshake

ca ca.crt # Certificate authority (CA) file

dh dh1024.pem # File containing Diffie Hellman parameters

cert server.crt # Local peer's signed certificate

key server.key # Local peer's private key

" > openvpn.conf



echo "

-----BEGIN CERTIFICATE-----

[b]wklejamy zawartosc pliku ca.crt[/b]

-----END CERTIFICATE-----

" > ca.crt

echo "

-----BEGIN RSA PRIVATE KEY-----

[b]wklejamy zawartosc pliku server.key[/b]

-----END RSA PRIVATE KEY-----

" > server.key

chmod 600 server.key

echo "

-----BEGIN CERTIFICATE-----

[b]wklejamy zawartosc pliku server.crt[/b]

-----END CERTIFICATE-----

" > server.crt

echo "

-----BEGIN DH PARAMETERS-----

[b]wklejamy zawartosc pliku dh1024.pem[/b]

-----END DH PARAMETERS-----

" > dh1024.pem



sleep 5

ln -s /usr/sbin/openvpn /tmp/myvpn

/tmp/myvpn --config openvpn.conf

# Specify that we are a client and that we

# will be pulling certain config file directives

# from the server.

client



# Use the same setting as you are using on

# the server.

# On most systems, the VPN will not function

# unless you partially or fully disable

# the firewall for the TUN/TAP interface.

dev tap

;dev tun



# Are we connecting to a TCP or

# UDP server?  Use the same setting as

# on the server.

proto tcp

;proto udp



# The hostname/IP and port of the server.

# You can have multiple remote entries

# to load balance between the servers.

remote tu_wpisujemy_IP_servera 1194

;remote my-server-2 1194



# Keep trying indefinitely to resolve the

# host name of the OpenVPN server.  Very useful

# on machines which are not permanently connected

# to the internet such as laptops.

resolv-retry infinite



# Most clients don't need to bind to

# a specific local port number.

nobind



# Try to preserve some state across restarts.

persist-key

persist-tun



# SSL/TLS parms.

# See the server config file for more

# description.  It's best to use

# a separate .crt/.key file pair

# for each client.  A single ca

# file can be used for all clients.

ca ca.crt

cert client1.crt

key client1.key



# Enable compression on the VPN link.

# Don't enable this unless it is also

# enabled in the server config file.

comp-lzo



# Set log file verbosity.

verb 3

iptables -I INPUT 1 -p tcp --dport 1194 -j ACCEPT

sh vpn.sh

tail -f /var/log/messages