一键部署超级简单易用的openvpn服务器，支持多证书+多账号...

fudyou

一. 服务器端部署项目地址：https://github.com/guoew/openvpn-install
% v8 S" r  J' m, h1 _9 h1 P1.1. 下载安装
( {3 }' H# j) S6 J* H. v, R9 V

1. # git clone https://github.com/guoew/openvpn-install.git
   
2. # cd openvpn-install &&  bash openvpn-install.sh
   * s& J- v: M( m2 K4 c' H
3. Welcome to this OpenVPN "road warrior" installer!
   5 P# A1 ]8 h' O& J" n$ [$ U7 k  c
4. 
   
5. I need to ask you a few questions before starting the setup.
   ( m& f: A) v/ n0 E' H9 C8 x& f, {- P
6. You can leave the default options and just press enter if you are ok with them.
   
7. 
   9 c7 Y  t7 u, z! b1 \! O- k
8. First, provide the IPv4 address of the network interface you want OpenVPN
   ' s% ^. x8 N& R" y# ?' s6 J
9. listening to.
   
10. IP address: 172.27.0.2 #默认获取本机ip,直接回车
    " }  s6 [* F& u
11. 
    5 B" i! U, e' N1 s* s2 t
12. This server is behind NAT. What is the public IPv4 address or hostname?
    
13. Public IP address / hostname: 18.24.64.250 #输入主机公网ip
    
14. 
    ' t: f- G: Q, N* W- \: M" |8 F9 @! ~
15. Which protocol do you want for OpenVPN connections?
    
16.    1) UDP (recommended)
    9 i! ^$ C. u8 \6 e* p
17.    2) TCP
    3 F% I, P$ ^# W8 T2 t
18. Protocol [1-2]: 1 #选择连接协议
    - e8 Y: k) n" g6 `/ [
19. 
    
20. What port do you want OpenVPN listening to?
    ( ~. i! u, ^' P
21. Port: 1194 #设置openvpn监听端口
    6 U. X2 E$ i- j, v5 F3 }
22. 
    ! j% b' M' M0 N! R7 Z$ J
23. Which DNS do you want to use with the VPN?
    9 b, L" {  s5 r) s) |2 d
24.    1) Current system resolvers
    : a# F/ s9 G9 r2 p+ M
25.    2) 1.1.1.1
    1 x( J0 G8 ^9 Z) S, k
26.    3) Google
    ! l& V* x5 o* U4 U
27.    4) OpenDNS
    7 X( ]  J2 T8 K1 K, O
28.    5) Verisign
    - z6 S( Z3 u  R5 Y; z; @& f
29. DNS [1-5]: 1 #选择DNS
    
30. 
    8 C4 e: V/ p6 U; c
31. Finally, tell me your name for the client certificate.
    
32. Please, use one word only, no special characters.
    
33. Client name: client #设置客户端名称
    
34. 
    $ z- @/ c& }+ Q; s" ~: c/ ^5 b& C
35. Okay, that was all I needed. We are ready to set up your OpenVPN server now.
    
36. Press any key to continue... #任意键继续
    
37. ...
    % Y8 s" \- v( e$ I1 J) e7 Q
38. An updated CRL has been created.
    2 J4 @% V/ ]5 {$ J% I, F+ a0 h
39. CRL file: /etc/openvpn/server/easy-rsa/pki/crl.pem
    7 m, n& m7 ?- ]0 B( P
40. 
    
41. Created symlink /etc/systemd/system/multi-user.target.wants/openvpn-iptables.service → /etc/systemd/system/openvpn-iptables.service.
    ( z1 V+ l, ^/ a; f0 _$ m
42. Created symlink /etc/systemd/system/multi-user.target.wants/openvpn-server@server.service → /lib/systemd/system/openvpn-server@.service.
    , @' w7 t; I/ p1 f5 U& ~' r1 C1 q
43. 
    
44. Finished!  #最终看到Finished时表示安装完毕
    & N( n7 I% [" \; `
45. 
    * t& F- `8 y8 O, A1 w
46. Your client configuration is available at: /root/client.ovpn #客户端配置文件路径
    
47. If you want to add more clients, you simply need to run this script again!
    ! a1 ]; x8 t) S& F$ y$ m/ X+ o

复制代码

将客户端配置文件 /root/client.ovpn，下载到本地以备客户端使用
1.2. 添加账号在openvpn目录下的userfile.sh中添加用户和密码，以空格隔开
! e% q9 y: E2 Y% M% b0 t6 g4 Z( B# X, m

1. # cat /etc/openvpn/userfile.sh
   7 [  ^0 D! ]+ p
2. guoew guoew123
   
3. yakexi yakexi123
   

复制代码

截止现在一个超级简单的openvpn服务就已经搭建好了，接下来将使用客户端连接openvpn服务器(以win10为例)
二. 客户端部署使用2.1. 安装openvpn客户端

• 客户端下载地址：https://swupdate.openvpn.org/community/releases/openvpn-install-2.4.0-I602.exe
  8 a+ l! u; h4 m$ k3 Z) W: J  T/ w安装步骤略(可自定义安装路径)
  

2.2. 配置客户端将安装好的客户端打开，点击Import file 把准备好的客户端配置文件导入进去。
# Q% i  _, |. `; c; B2.3. 连接openvpn服务器打开客户端，点击Connect，使用服务器端已添加的账号登录
+ Q( T/ s/ m  x* X* j" Q+ Q3 z2 Y, I

---

END
附：安装完毕后，再次执行脚本openvpn-install.sh 会有四个菜单选项(添加、撤销、卸载、退出)，可根据自身实际情况应用,如下：

1. Looks like OpenVPN is already installed.
   
2. 
   
3. What do you want to do?
   
4.    1) Add a new user
   
5.    2) Revoke an existing user
   ; s) B' E5 f" T* W5 f" K5 T
6.    3) Remove OpenVPN
   ; r' z" d5 J) s* B, y
7.    4) Exit
   ; H0 x/ d! N0 b9 J$ v2 y
8. Select an option [1-4]:
   * P7 d+ G' ^% p! @% `# L

复制代码

这里有个不足之处是，当使用多证书时，账号是通用的。即同一个账号，可以应用于不同的证书。
如果想要不同用户使用不同的证书进行登录[无账号]，欢迎访问原项目地址：
https://github.com/Nyr/openvpn-install

2 ?8 p6 g" E8 G3 d