一键部署超级简单易用的openvpn服务器，支持多证书+多账号...

fudyou

一. 服务器端部署项目地址：https://github.com/guoew/openvpn-install
) T; }8 |1 ^' }- Y1.1. 下载安装
) o  G$ P+ j" u/ B

1. # git clone https://github.com/guoew/openvpn-install.git
   
2. # cd openvpn-install &&  bash openvpn-install.sh
   
3. Welcome to this OpenVPN "road warrior" installer!
   
4. 
   , G7 A" T# f! g: Z$ w8 N9 f+ g
5. I need to ask you a few questions before starting the setup.
   8 r& V: O# V) _
6. You can leave the default options and just press enter if you are ok with them.
   
7. 
   & e# E- A: N4 q5 n, w' {* d9 R7 y
8. First, provide the IPv4 address of the network interface you want OpenVPN
   ; a& j* O' {4 T! [% P
9. listening to.
   
10. IP address: 172.27.0.2 #默认获取本机ip,直接回车
    
11. 
    " ?/ C9 M9 ]' ?, w5 j6 S
12. This server is behind NAT. What is the public IPv4 address or hostname?
    6 i" E( N" s1 [. A4 B  i4 g6 K
13. Public IP address / hostname: 18.24.64.250 #输入主机公网ip
    % M& c2 \$ `7 ]" r# `! G- K/ @" P. ^
14. 
    
15. Which protocol do you want for OpenVPN connections?
    
16.    1) UDP (recommended)
    % V# R; J2 I- L0 ]1 m
17.    2) TCP
    
18. Protocol [1-2]: 1 #选择连接协议
    
19. 
    
20. What port do you want OpenVPN listening to?
      I: S; T6 |& H6 V* Q
21. Port: 1194 #设置openvpn监听端口
    , m1 i& I9 w: }" K7 C
22. 
    2 ?# l! @6 J- T) f
23. Which DNS do you want to use with the VPN?
    / }1 X6 U! J5 I* z3 J, Y
24.    1) Current system resolvers
    
25.    2) 1.1.1.1
    
26.    3) Google
    & C6 W5 M( s) {  l. J, s+ M- z# Q1 H' ]6 y
27.    4) OpenDNS
    $ B7 {0 q& O0 n5 U. ?! V: ]+ R: Y: M& s& f
28.    5) Verisign
    # K) t3 Q! o" E, l8 q
29. DNS [1-5]: 1 #选择DNS
    
30. 
    ) X+ S. Z4 v( s: W  _: T. g
31. Finally, tell me your name for the client certificate.
    
32. Please, use one word only, no special characters.
    $ z+ Z2 f2 x" |
33. Client name: client #设置客户端名称
      a/ @! K+ v" a! _  J* C, B
34. 
    
35. Okay, that was all I needed. We are ready to set up your OpenVPN server now.
    ( }! S7 z( |, U/ w8 u. a# R3 k
36. Press any key to continue... #任意键继续
    
37. ...
    % L$ w" T7 _: z9 o8 L
38. An updated CRL has been created.
    5 m" g; ~8 T( I3 q: e9 [; k) S
39. CRL file: /etc/openvpn/server/easy-rsa/pki/crl.pem
    % e9 a6 V- O1 ~) h
40. 
    
41. Created symlink /etc/systemd/system/multi-user.target.wants/openvpn-iptables.service → /etc/systemd/system/openvpn-iptables.service.
    2 e6 s6 |1 o- I% F2 R
42. Created symlink /etc/systemd/system/multi-user.target.wants/openvpn-server@server.service → /lib/systemd/system/openvpn-server@.service.
    8 j( i+ M, O( |& G! g* H6 B1 c5 g0 e$ V
43. 
    
44. Finished!  #最终看到Finished时表示安装完毕
    1 E5 e' n1 @' h  W& P; {
45. 
    ' `( z3 W  k/ m$ z# a3 {, N
46. Your client configuration is available at: /root/client.ovpn #客户端配置文件路径
    
47. If you want to add more clients, you simply need to run this script again!
    , o1 Q! y' D+ }3 D8 i# h0 \* Z

复制代码

将客户端配置文件 /root/client.ovpn，下载到本地以备客户端使用
' N% D& ?- _; I( O7 O; |  R4 |; `1.2. 添加账号在openvpn目录下的userfile.sh中添加用户和密码，以空格隔开
9 j- m) r2 z; g7 e, d6 y3 l0 F, {+ ^

1. # cat /etc/openvpn/userfile.sh
   
2. guoew guoew123
   
3. yakexi yakexi123
   4 C- Z7 O4 f; V# k  E& E3 _

复制代码

截止现在一个超级简单的openvpn服务就已经搭建好了，接下来将使用客户端连接openvpn服务器(以win10为例)
二. 客户端部署使用2.1. 安装openvpn客户端

• 客户端下载地址：https://swupdate.openvpn.org/community/releases/openvpn-install-2.4.0-I602.exe
  ! E( f2 S: F' Y! v! P# x5 I7 j. v安装步骤略(可自定义安装路径)
  7 ?5 V& }  s2 f: o, r/ `

2.2. 配置客户端将安装好的客户端打开，点击Import file 把准备好的客户端配置文件导入进去。
2.3. 连接openvpn服务器打开客户端，点击Connect，使用服务器端已添加的账号登录

---

END
: n( h% [# b: Y3 g! z5 o1 m3 H附：安装完毕后，再次执行脚本openvpn-install.sh 会有四个菜单选项(添加、撤销、卸载、退出)，可根据自身实际情况应用,如下：

1. Looks like OpenVPN is already installed.
   2 _, h& z0 h) f8 I+ @4 y
2. 
   
3. What do you want to do?
   
4.    1) Add a new user
   
5.    2) Revoke an existing user
   ; E$ C. s9 B# k+ O6 v' X- K
6.    3) Remove OpenVPN
   ( h8 n- b2 h; x( z) g$ D( _( Z
7.    4) Exit
   ( O. j- y7 j  c  R# _8 c
8. Select an option [1-4]:
   

复制代码

这里有个不足之处是，当使用多证书时，账号是通用的。即同一个账号，可以应用于不同的证书。
如果想要不同用户使用不同的证书进行登录[无账号]，欢迎访问原项目地址：
4 e! X3 D# o9 }0 K% hhttps://github.com/Nyr/openvpn-install

+ y: b0 P( V$ Z5 N