Forum libero

Scritto da: ::1
> Troll grammar nazi mi fai lo spellcheck?
> http://suoranciata.github.io/openvpn.html

Il Grammar Nazi corregge solo l'italiano .
Comunque quel che mi è venuto in mente è

[magari alle sigle mettere le maiuscole per farle risaltare meglio]

Before starting, I usually generate the keys on my computer rather than the remote vps server, as the first has more entropy sources and is

faster to gather the needed random bits. Then I copy the generated files on the server as needed.

This command generates the private key (ca.key) and the public key (ca.crt); highlighted parts can be edited to specify better security

settings (key type, key length, algorithm, shorter expiration) and to customize the cname (usually I just go with the machine hostname).

This key is used for tls-auth (hardened configuration). [mancava il punto]

Short and simple configuration for the server, using the previously generated files; place the above directives in a file, I usually go for

/etc/openvpn/server.conf.

client-to-client enables the ability for clients to see each other.

in my distribution are found in /usr/share/openvpn/examples

diagnosing

The same applies for the client configuration.

operating system
an openvpn server daemon

Arch Linux

the point is to keep the private key secret on the machine

replace the highlighted part with the server hostname or the server ip address, port and protocol according to the server configuration.

The redirect-gateway directive adds
all the traffic of the client machine

operating system
an openvpn client daemon

Arch Linux

Again, as for/with the server,

This section explains how to create
a .ovpn file [supponendo si pronunci iniziando con "dot"]
An .ovpn file [idem]

I usually generate the keys on my linux desktop machine

This configuration has been tested with a Windows 10 client

A Windows-specific tweak

Sarebbe anche consigliabile una ripassata da parte di sassofono che è quello che l'inglese lo conosce meglio.