一键部署超级简单易用的openvpn服务器，支持多证书+多账号...

fudyou

一. 服务器端部署项目地址：https://github.com/guoew/openvpn-install
1.1. 下载安装
" f; v+ b) h9 B) X" e+ F

1. # git clone https://github.com/guoew/openvpn-install.git
   0 y: }1 j. q8 A' U
2. # cd openvpn-install &&  bash openvpn-install.sh
   
3. Welcome to this OpenVPN "road warrior" installer!
   
4. 
   
5. I need to ask you a few questions before starting the setup.
   7 J9 O: }& [* z/ Y* z3 A
6. You can leave the default options and just press enter if you are ok with them.
   $ K1 ~. o! m, Q: x% f
7. 
   
8. First, provide the IPv4 address of the network interface you want OpenVPN
   + b+ }1 t& g' h2 X
9. listening to.
   % ^0 E+ ~" H3 u1 d* j
10. IP address: 172.27.0.2 #默认获取本机ip,直接回车
    
11. 
    ! _9 Z2 R0 A0 R4 k/ Z. c/ j1 `3 D/ }
12. This server is behind NAT. What is the public IPv4 address or hostname?
    
13. Public IP address / hostname: 18.24.64.250 #输入主机公网ip
    
14. 
    
15. Which protocol do you want for OpenVPN connections?
    , P  e+ X9 a5 i  q- s
16.    1) UDP (recommended)
    * W( I' E3 e1 p
17.    2) TCP
    ) X. e3 s% }( |0 _: W' I( O+ E
18. Protocol [1-2]: 1 #选择连接协议
    ; o3 u/ Y0 u! K) F$ d( s
19. 
    
20. What port do you want OpenVPN listening to?
    & p5 y5 u7 S8 R+ [9 f- G
21. Port: 1194 #设置openvpn监听端口
    
22. 
    7 }; [# l  B% q  z  _8 v
23. Which DNS do you want to use with the VPN?
    6 B! R  b/ s  u( [, s, T9 {
24.    1) Current system resolvers
    
25.    2) 1.1.1.1
    
26.    3) Google
    * V& g; K" H4 P% e$ t
27.    4) OpenDNS
    5 x) c: X0 i( E$ f, p1 e- ]9 {* g
28.    5) Verisign
    
29. DNS [1-5]: 1 #选择DNS
    
30. 
    + p) `! e  a. D
31. Finally, tell me your name for the client certificate.
    : h4 R/ |4 J4 [; o
32. Please, use one word only, no special characters.
    8 {  U3 \+ {. G2 B/ M0 u$ q
33. Client name: client #设置客户端名称
    - V% c" d+ A) I7 Z. c2 H( e
34. 
    
35. Okay, that was all I needed. We are ready to set up your OpenVPN server now.
    ) L) Z- l' k! E  X
36. Press any key to continue... #任意键继续
    
37. ...
    
38. An updated CRL has been created.
    
39. CRL file: /etc/openvpn/server/easy-rsa/pki/crl.pem
    7 N1 J2 D' f( L9 G# n
40. 
    
41. Created symlink /etc/systemd/system/multi-user.target.wants/openvpn-iptables.service → /etc/systemd/system/openvpn-iptables.service.
    
42. Created symlink /etc/systemd/system/multi-user.target.wants/openvpn-server@server.service → /lib/systemd/system/openvpn-server@.service.
    
43. 
    " l' r3 X: Q5 h# y
44. Finished!  #最终看到Finished时表示安装完毕
    
45. 
    + ~5 r3 j# D7 e, }: Y# V. Y/ Y
46. Your client configuration is available at: /root/client.ovpn #客户端配置文件路径
    ! V7 X. T1 s0 y- `! w) C0 |4 @
47. If you want to add more clients, you simply need to run this script again!
    

复制代码

将客户端配置文件 /root/client.ovpn，下载到本地以备客户端使用
- Y9 ?$ ]& n, n1 N) Y1.2. 添加账号在openvpn目录下的userfile.sh中添加用户和密码，以空格隔开

1. # cat /etc/openvpn/userfile.sh
   4 z, b( N& Z  D+ a
2. guoew guoew123
   : k( i* I2 A. \  }
3. yakexi yakexi123
   

复制代码

截止现在一个超级简单的openvpn服务就已经搭建好了，接下来将使用客户端连接openvpn服务器(以win10为例)
; I3 g! e8 ^! J1 _, y7 z二. 客户端部署使用2.1. 安装openvpn客户端

• 客户端下载地址：https://swupdate.openvpn.org/community/releases/openvpn-install-2.4.0-I602.exe
  + M) g0 W- K! \6 V8 j9 k安装步骤略(可自定义安装路径)
  / F/ R+ O9 S# Q% j) ]& V' R

2.2. 配置客户端将安装好的客户端打开，点击Import file 把准备好的客户端配置文件导入进去。
0 P0 }& i8 Z9 E4 F2.3. 连接openvpn服务器打开客户端，点击Connect，使用服务器端已添加的账号登录

---

END
附：安装完毕后，再次执行脚本openvpn-install.sh 会有四个菜单选项(添加、撤销、卸载、退出)，可根据自身实际情况应用,如下：
5 Y0 [# L# m6 O, W$ ~" x

1. Looks like OpenVPN is already installed.
   
2. 
   
3. What do you want to do?
   * D/ m) u3 a* |
4.    1) Add a new user
   " v) T8 t+ h0 Z! P8 L  H2 _
5.    2) Revoke an existing user
   , F$ j  z+ i1 U. ?8 I! H
6.    3) Remove OpenVPN
   
7.    4) Exit
   ( {% ]' P5 d$ {- W( ]
8. Select an option [1-4]:
   + j6 ?8 p; m! e$ Q+ v) o

复制代码

& @% i; u8 B& P) Q. }: j% w  G# M这里有个不足之处是，当使用多证书时，账号是通用的。即同一个账号，可以应用于不同的证书。
如果想要不同用户使用不同的证书进行登录[无账号]，欢迎访问原项目地址：
https://github.com/Nyr/openvpn-install
: n! z& ^/ P) r  N" s
4 @6 z$ _& t0 k" B1 c: y1 j4 Q8 _