一键部署超级简单易用的openvpn服务器，支持多证书+多账号...

fudyou

一. 服务器端部署项目地址：https://github.com/guoew/openvpn-install
, D/ m* X9 d) g1.1. 下载安装
; i% L& J* p# U

1. # git clone https://github.com/guoew/openvpn-install.git
   
2. # cd openvpn-install &&  bash openvpn-install.sh
   2 S! m/ E9 y8 u6 e  K% N
3. Welcome to this OpenVPN "road warrior" installer!
   
4. 
   8 m5 ?' \; `1 ]. M8 y
5. I need to ask you a few questions before starting the setup.
   
6. You can leave the default options and just press enter if you are ok with them.
   
7. 
   1 X( L( f0 H% a& w9 s2 d6 y& l: G
8. First, provide the IPv4 address of the network interface you want OpenVPN
   
9. listening to.
   * [. E* Z. S, u( N: R$ k/ ?
10. IP address: 172.27.0.2 #默认获取本机ip,直接回车
    
11. 
    & Q& w- L! j. w: Z0 Z
12. This server is behind NAT. What is the public IPv4 address or hostname?
    
13. Public IP address / hostname: 18.24.64.250 #输入主机公网ip
    
14. 
    
15. Which protocol do you want for OpenVPN connections?
    ! I$ b$ e* f1 M5 {$ h
16.    1) UDP (recommended)
    
17.    2) TCP
    3 f# O8 T3 Q% G  N' G+ {& [
18. Protocol [1-2]: 1 #选择连接协议
    & i" j) R2 w$ u3 @4 ^
19. 
    : S! l) q9 x! [
20. What port do you want OpenVPN listening to?
    
21. Port: 1194 #设置openvpn监听端口
    
22. 
    
23. Which DNS do you want to use with the VPN?
    
24.    1) Current system resolvers
    7 k9 c& z1 l' j/ w0 c' P. o( b
25.    2) 1.1.1.1
    
26.    3) Google
    
27.    4) OpenDNS
    7 L& d: J" B7 @: k; O3 m  `
28.    5) Verisign
    
29. DNS [1-5]: 1 #选择DNS
      l$ W) W$ c3 u3 b* ?
30. 
    
31. Finally, tell me your name for the client certificate.
    1 L# ?2 b" g* Z0 u: Y! ^
32. Please, use one word only, no special characters.
    % J* P$ {; x2 {  G
33. Client name: client #设置客户端名称
    & o3 [0 }$ `+ v' @2 _
34. 
    " K* n! K5 f  [9 x
35. Okay, that was all I needed. We are ready to set up your OpenVPN server now.
      L4 \9 ~8 b& \5 v! ~3 i9 I. ?' Q
36. Press any key to continue... #任意键继续
    
37. ...
    
38. An updated CRL has been created.
    + B- F4 Q4 Q6 l- v
39. CRL file: /etc/openvpn/server/easy-rsa/pki/crl.pem
    
40. 
    
41. Created symlink /etc/systemd/system/multi-user.target.wants/openvpn-iptables.service → /etc/systemd/system/openvpn-iptables.service.
    
42. Created symlink /etc/systemd/system/multi-user.target.wants/openvpn-server@server.service → /lib/systemd/system/openvpn-server@.service.
    + m2 V% ?1 Q  |! |( t2 V1 O/ i; T
43. 
    
44. Finished!  #最终看到Finished时表示安装完毕
    
45. 
    
46. Your client configuration is available at: /root/client.ovpn #客户端配置文件路径
    1 U3 a" j. O/ t' n$ Y' a, h
47. If you want to add more clients, you simply need to run this script again!
    

复制代码

将客户端配置文件 /root/client.ovpn，下载到本地以备客户端使用
$ z  H5 h. Y& O- B5 b1.2. 添加账号在openvpn目录下的userfile.sh中添加用户和密码，以空格隔开
* [* {# H- v7 @( J

1. # cat /etc/openvpn/userfile.sh
   ( I+ n* |$ E- J  s- G6 X  ?
2. guoew guoew123
   
3. yakexi yakexi123
   

复制代码

截止现在一个超级简单的openvpn服务就已经搭建好了，接下来将使用客户端连接openvpn服务器(以win10为例)
二. 客户端部署使用2.1. 安装openvpn客户端

• 客户端下载地址：https://swupdate.openvpn.org/community/releases/openvpn-install-2.4.0-I602.exe
  安装步骤略(可自定义安装路径)
  5 ~, b+ J2 E3 n# _( w$ T

2.2. 配置客户端将安装好的客户端打开，点击Import file 把准备好的客户端配置文件导入进去。
: s7 d+ |" i* m; c$ C2.3. 连接openvpn服务器打开客户端，点击Connect，使用服务器端已添加的账号登录
3 z2 }- ]& g5 G' c3 e. r

---

END
附：安装完毕后，再次执行脚本openvpn-install.sh 会有四个菜单选项(添加、撤销、卸载、退出)，可根据自身实际情况应用,如下：

1. Looks like OpenVPN is already installed.
   
2. 
   . d$ S8 z) g" M; k5 k# H- F" N3 ~& S
3. What do you want to do?
   8 R' }3 N9 M7 K, t; q5 ]
4.    1) Add a new user
   - b7 e4 O& E( y& ]7 p
5.    2) Revoke an existing user
   
6.    3) Remove OpenVPN
   2 ]9 B* u; X) J  v; [
7.    4) Exit
   + I2 ]& v5 d0 ^% v7 h% a9 A
8. Select an option [1-4]:
   

复制代码

0 @) L2 m$ s) |+ x3 P这里有个不足之处是，当使用多证书时，账号是通用的。即同一个账号，可以应用于不同的证书。
# A" @% S& u5 V9 J( S1 m如果想要不同用户使用不同的证书进行登录[无账号]，欢迎访问原项目地址：
https://github.com/Nyr/openvpn-install
, v7 m5 M* K' B9 R
" S2 O/ [4 }0 Y4 C. A7 |