Talk:OpenVPN

From Gentoo Wiki
Jump to:navigation Jump to:search
Note
This is a Talk page - please see the documentation about using talk pages. Add newer comments below older ones, sign comments using four tildes (~~~~), and indent successive comments with colons (:). Add new sections at the bottom of the page, under a heading (== ==). Please remember to mark sections as "open for discussion" using {{talk|open}}, so they will show up in the list of open discussions.

Hi

it seems that openvpn 2.3.7 with systemd needs the directory /etc/openvpn/client. An upgrade from an earlier version works easily either by copying the files or by adding a symbolic link

ln -s /etc/openvpn /etc/openvpn/client
ln -s /usr/lib/systemd/system/openvpn-client\@.service openvpn-client\@<your_openvpn_client_configuration_file>.service

and starting the service with

systemctl start openvpn-client@<your_openvpn_client_configuration_file>

Kind regards!


Hi, the

 ln -s /usr/lib/systemd/system/openvpn-client\@.service openvpn-client\@<your_openvpn_client_configuration_file>.service

line isn't needed, systemctl enable call will do the right thing with the @yourservice

--Kelsar (talk) 13:05, 2 September 2015 (UTC)

Could someone please using systemd test this? This would really good. Many thanks! Needle (talk) 13:04, 24 January 2024 (UTC)

TODO Please describe if it is possible to install client only, without the server

Vitaly-zdanevich (talk) 10:34, 26 April 2022 (UTC)

Hi, I am not sure how this client only solution is meant in technical terms. The basic VPN situation is following : one participant is offering a secure connection (server) , one participant is initiating a secure connection (client). On top of that, linux (tun) IP tunnel interface is used. This is the technical scenario. You might want to try out this, most simple HOWTO setting up OpenVPN using static-key. Needle (talk) 12:54, 24 January 2024 (UTC)
The suggested static-key method above is deprecated. I was not aware until i tried following the setup. But there is another procedure, of easily setting up a ad-hoc (P2P, point-to-point or peer-to-peer) openvpn. It is using the peer-fingerprint to authenticate the nodes. It might prove useful for ad-hoc situations when having openvpn client and running openvpn at home. This would be a use-case for such setup. I try to build some netlab and write about this alternative setup method. Needle (talk) 20:00, 26 January 2024 (UTC)
There is now this in the wiki OpenVPN/fingerprint-authentication. That is the only simple setup method, but still it is using a server. There is no way for OpenVPN to have client only connection type. You might try out wireguard for that exact purpose, this could be a appropiate tool to configure and try out such easy and simple to setup connection type, w/o relying on a server. Needle (talk) 19:21, 3 February 2024 (UTC)

TODO Please describe is it compatible with AWS VPN or not

Vitaly-zdanevich (talk) 10:42, 26 April 2022 (UTC)

Please refer to the official website. I think this request can be closed now. Needle (talk) 13:00, 24 January 2024 (UTC)