一键部署超级简单易用的openvpn服务器，支持多证书+多账号...

fudyou

一. 服务器端部署项目地址：https://github.com/guoew/openvpn-install
1.1. 下载安装

1. # git clone https://github.com/guoew/openvpn-install.git
   
2. # cd openvpn-install &&  bash openvpn-install.sh
   
3. Welcome to this OpenVPN "road warrior" installer!
   
4. 
   
5. I need to ask you a few questions before starting the setup.
   ; Y/ |0 c% m/ c9 t2 }  z! R
6. You can leave the default options and just press enter if you are ok with them.
   
7. 
   $ L  X1 |1 b* O5 ~1 p7 Q
8. First, provide the IPv4 address of the network interface you want OpenVPN
   
9. listening to.
   + x/ K2 ~# h' B, F  e$ n
10. IP address: 172.27.0.2 #默认获取本机ip,直接回车
    
11. 
    3 Z0 o. ~9 Y& J$ k8 L6 L" R- K6 Z
12. This server is behind NAT. What is the public IPv4 address or hostname?
    
13. Public IP address / hostname: 18.24.64.250 #输入主机公网ip
    - i# J+ s2 X7 G' l
14. 
    
15. Which protocol do you want for OpenVPN connections?
    % v) U/ {: i7 y; ?# D
16.    1) UDP (recommended)
    5 H& B7 S& s3 g% L. Y
17.    2) TCP
    
18. Protocol [1-2]: 1 #选择连接协议
    
19. 
    : d# t7 u5 G8 \& g- S, L1 Q. F
20. What port do you want OpenVPN listening to?
    , d' E+ t2 H/ [/ b$ O) ~
21. Port: 1194 #设置openvpn监听端口
    
22. 
    4 u# ?" R  y$ P6 m# v5 B
23. Which DNS do you want to use with the VPN?
    . Q+ a2 @- {! z
24.    1) Current system resolvers
    5 L# U3 X  M4 K4 P) g6 E
25.    2) 1.1.1.1
    
26.    3) Google
    ; {; V: z0 p5 g
27.    4) OpenDNS
    
28.    5) Verisign
    8 t9 _1 I7 D! S# t
29. DNS [1-5]: 1 #选择DNS
    # p, T% ~$ Z+ s2 A! w) Y& w
30. 
    
31. Finally, tell me your name for the client certificate.
    & b( p- D% g4 x. D9 j7 J5 A
32. Please, use one word only, no special characters.
    3 K8 O6 F& ?- |. ^$ L# @
33. Client name: client #设置客户端名称
    
34. 
    " ^8 ^* p: \! G# u. z6 {' O
35. Okay, that was all I needed. We are ready to set up your OpenVPN server now.
    
36. Press any key to continue... #任意键继续
    
37. ...
    
38. An updated CRL has been created.
    7 p+ A% U: y' n, h+ r
39. CRL file: /etc/openvpn/server/easy-rsa/pki/crl.pem
    8 R0 U& ~8 c+ h  y; Z7 e7 Y
40. 
    ) M) X6 c1 @% V) n8 I
41. Created symlink /etc/systemd/system/multi-user.target.wants/openvpn-iptables.service → /etc/systemd/system/openvpn-iptables.service.
    
42. Created symlink /etc/systemd/system/multi-user.target.wants/openvpn-server@server.service → /lib/systemd/system/openvpn-server@.service.
    1 p4 T- {/ \& l6 K! b& j
43. 
    
44. Finished!  #最终看到Finished时表示安装完毕
    $ l' J8 I% v2 X( Q
45. 
    
46. Your client configuration is available at: /root/client.ovpn #客户端配置文件路径
    
47. If you want to add more clients, you simply need to run this script again!
    

复制代码

将客户端配置文件 /root/client.ovpn，下载到本地以备客户端使用
5 M( n/ I6 N& Y8 l5 i1.2. 添加账号在openvpn目录下的userfile.sh中添加用户和密码，以空格隔开
% K: M( R( O( g

1. # cat /etc/openvpn/userfile.sh
   
2. guoew guoew123
   
3. yakexi yakexi123
   ) Y4 b" L$ T* d- C

复制代码

截止现在一个超级简单的openvpn服务就已经搭建好了，接下来将使用客户端连接openvpn服务器(以win10为例)
* ]8 P5 u: v( e, T二. 客户端部署使用2.1. 安装openvpn客户端

• 客户端下载地址：https://swupdate.openvpn.org/community/releases/openvpn-install-2.4.0-I602.exe
  安装步骤略(可自定义安装路径)
  + ?) J* f2 E" ]' P

2.2. 配置客户端将安装好的客户端打开，点击Import file 把准备好的客户端配置文件导入进去。
, l5 k. a8 }6 ]7 [  x2.3. 连接openvpn服务器打开客户端，点击Connect，使用服务器端已添加的账号登录
$ o" e& m; h" p5 J, p! q+ w1 r4 [

---

END
附：安装完毕后，再次执行脚本openvpn-install.sh 会有四个菜单选项(添加、撤销、卸载、退出)，可根据自身实际情况应用,如下：
* y, g$ R$ L( m& D0 \9 X  @

1. Looks like OpenVPN is already installed.
   5 K2 n% f+ F5 h' `0 s% m0 Z( @; [1 Y
2. 
   1 D6 I/ p% ^% A- U
3. What do you want to do?
   ; c/ X6 l/ e: l" c. [
4.    1) Add a new user
   . c+ d4 h! i! R; [5 y1 I
5.    2) Revoke an existing user
   
6.    3) Remove OpenVPN
   
7.    4) Exit
   
8. Select an option [1-4]:
   # |, [$ m1 C8 U, r6 j; c' d

复制代码

这里有个不足之处是，当使用多证书时，账号是通用的。即同一个账号，可以应用于不同的证书。
; s4 z6 T5 [5 ]$ N% ^3 }如果想要不同用户使用不同的证书进行登录[无账号]，欢迎访问原项目地址：
https://github.com/Nyr/openvpn-install

) I9 Z" B# i- k; |# \