diff --git a/client.conf b/client.conf index 4853b00..143e8b6 100644 --- a/client.conf +++ b/client.conf @@ -6,20 +6,13 @@ persist-tun persist-key # certificados -ca ca.crt -cert user.crt -key user.key - -# criamos key -# crismos csr resquest -# -> gateway -# el certificado -# -> user +ca /etc/openvpn/client/ca.crt +cert /etc/openvpn/client/user.crt +key /etc/openvpn/client/user.key # 2FA auth-user-pass cipher AES-256-GCM auth SHA256 - -tls-auth ta.key 1 +tls-auth /etc/openvpn/client/ta.key 1 key-direction 1 diff --git a/vpn.conf b/vpn.conf index cf6cbb0..5e347e4 100644 --- a/vpn.conf +++ b/vpn.conf @@ -2,13 +2,15 @@ local 10.60.0.3 port 1194 proto udp dev tun -ca ca.crt # -cert vpn.crt # -key vpn.key # ya + +# Bro is too honorable +ca /etc/openvpn/server/ca.crt +cert /etc/openvpn/server/vpn.crt +key /etc/openvpn/server/vpn.key dh dh2048.pem server 10.60.0.0 255.255.255.0 verb 4 plugin /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so openvpn -tls-auth ta.key 0 +tls-auth /etc/openvpn/server/ta.key 0 key-direction 0