一键部署超级简单易用的openvpn服务器，支持多证书+多账号...

fudyou

一. 服务器端部署项目地址：https://github.com/guoew/openvpn-install
1.1. 下载安装
3 ^: t6 v' E! G' l; k3 f! r

1. # git clone https://github.com/guoew/openvpn-install.git
   " x) H7 }  W# Q5 }$ J
2. # cd openvpn-install &&  bash openvpn-install.sh
   # E9 {& @$ [1 q) Y; x
3. Welcome to this OpenVPN "road warrior" installer!
   
4. 
   
5. I need to ask you a few questions before starting the setup.
   
6. You can leave the default options and just press enter if you are ok with them.
   # p$ ^! r& R- ~8 T) K9 P
7. 
   ) O7 V$ i. j3 M( D2 @; u' f
8. First, provide the IPv4 address of the network interface you want OpenVPN
   
9. listening to.
   8 E2 L8 ?+ S' d4 M2 H; M
10. IP address: 172.27.0.2 #默认获取本机ip,直接回车
    5 G! ]' \- u1 Q/ v
11. 
    
12. This server is behind NAT. What is the public IPv4 address or hostname?
    
13. Public IP address / hostname: 18.24.64.250 #输入主机公网ip
    ( D' A* |6 h6 e( M9 O7 n
14. 
    
15. Which protocol do you want for OpenVPN connections?
    
16.    1) UDP (recommended)
    ( y& p9 S" [$ z' Z9 B: D0 L
17.    2) TCP
    , R4 ]1 `$ \- U9 |
18. Protocol [1-2]: 1 #选择连接协议
    / p4 e$ A) q5 e
19. 
    . ^( ]3 S, _- i# Y: B. _6 m
20. What port do you want OpenVPN listening to?
    
21. Port: 1194 #设置openvpn监听端口
    
22. 
    
23. Which DNS do you want to use with the VPN?
    
24.    1) Current system resolvers
    
25.    2) 1.1.1.1
    
26.    3) Google
    
27.    4) OpenDNS
    4 |/ Y/ w) f1 \* x1 `- ^. J9 X
28.    5) Verisign
    
29. DNS [1-5]: 1 #选择DNS
    
30. 
    6 a3 x, [: t& l. g) Y) V' x5 a
31. Finally, tell me your name for the client certificate.
    
32. Please, use one word only, no special characters.
    
33. Client name: client #设置客户端名称
    0 I7 k% ]+ H& ^4 R, [5 h
34. 
    
35. Okay, that was all I needed. We are ready to set up your OpenVPN server now.
    
36. Press any key to continue... #任意键继续
    
37. ...
    4 R2 P, Q( H$ a  w
38. An updated CRL has been created.
    
39. CRL file: /etc/openvpn/server/easy-rsa/pki/crl.pem
    9 c' e  h& M3 i$ X# }9 X# w, \
40. 
    1 |  u' y% r, }+ s: u2 u
41. Created symlink /etc/systemd/system/multi-user.target.wants/openvpn-iptables.service → /etc/systemd/system/openvpn-iptables.service.
    
42. Created symlink /etc/systemd/system/multi-user.target.wants/openvpn-server@server.service → /lib/systemd/system/openvpn-server@.service.
    0 z$ ^6 Z/ Z5 y' i3 o8 J( a
43. 
    7 b$ H0 n. F, q  q. [" b, r
44. Finished!  #最终看到Finished时表示安装完毕
    
45. 
    $ {, A- n& O) \+ V. G
46. Your client configuration is available at: /root/client.ovpn #客户端配置文件路径
    4 d" q' n8 ]2 H; f
47. If you want to add more clients, you simply need to run this script again!
    ' C* X  H. {% M0 u

复制代码

将客户端配置文件 /root/client.ovpn，下载到本地以备客户端使用
1 e' W0 h! B6 h7 n( W8 U1.2. 添加账号在openvpn目录下的userfile.sh中添加用户和密码，以空格隔开

1. # cat /etc/openvpn/userfile.sh
   
2. guoew guoew123
   
3. yakexi yakexi123
   

复制代码

截止现在一个超级简单的openvpn服务就已经搭建好了，接下来将使用客户端连接openvpn服务器(以win10为例)
' |% w6 K2 r! [. Q6 w2 M二. 客户端部署使用2.1. 安装openvpn客户端

• 客户端下载地址：https://swupdate.openvpn.org/community/releases/openvpn-install-2.4.0-I602.exe
  安装步骤略(可自定义安装路径)
  

2.2. 配置客户端将安装好的客户端打开，点击Import file 把准备好的客户端配置文件导入进去。
+ ]: p' N, d: P4 C+ p2 o( F. V" g% t2.3. 连接openvpn服务器打开客户端，点击Connect，使用服务器端已添加的账号登录
* t* m) Q: M7 o% r

---

END
附：安装完毕后，再次执行脚本openvpn-install.sh 会有四个菜单选项(添加、撤销、卸载、退出)，可根据自身实际情况应用,如下：
+ d! \7 E  P8 e4 H7 R

1. Looks like OpenVPN is already installed.
   
2. 
   
3. What do you want to do?
   9 y! y8 P3 ]) S+ x# e- i
4.    1) Add a new user
   
5.    2) Revoke an existing user
   5 f# ]% g# o4 F/ [) {! J
6.    3) Remove OpenVPN
   
7.    4) Exit
   
8. Select an option [1-4]:
   * [$ s6 L3 }" d- @3 T! o& _

复制代码

这里有个不足之处是，当使用多证书时，账号是通用的。即同一个账号，可以应用于不同的证书。
4 G* W" m" y# {+ l) S% [) O如果想要不同用户使用不同的证书进行登录[无账号]，欢迎访问原项目地址：
# D/ X8 O. N, ohttps://github.com/Nyr/openvpn-install
2 j' O+ h' B2 q$ u& `2 \