iGFW

openvpn2.3更新，主要是修复和改进。把32位和64位Windows版本分开了，新的openvpn-gui支持繁体中文，不过貌似状态显示中中文乱码，以前的版本是不存在此问题的，还有虚拟网卡和OpenVPN程序分开两个文件夹了，不是很爽啊。

另外貌似openvpn官方网站被攻击了，又恰逢其旗下VPN服务privatetunnel的IP全部被封，是不是一伙人干的。

========

openvpn 2.3安装ipv6

Execute the following command to initial the environment
[root@lixxx-xx ~]# yum update
[root@lixxx-xx ~]# yum install gcc
[root@lixxx-xx ~]# yum install gcc-c++
[root@lixxx-xx ~]# yum install make
[root@lixxx-xx ~]# yum install dnsmasq
[root@lixxx-xx openvpn]# yum install openssl-devel
[root@lixxx-xx ~]# mkdir openvpn
[root@lixxx-xx ~]# cd openvpn
Then Download the OpenVPN 2.3 from the website

http://openvpn.net/index.php/download.html

1
[root@lixxx-xx openvpn]# wget http://xxxx.org/openvpn-2.3-alpha1.tar.gz
Then Download the LZO lib from the website

http://www.oberhumer.com/opensource/lzo/

1
[root@lixxx-xx openvpn]# wget http://xxxx.com/lzo-2.06.tar.gz
Setup the LZO library
[root@lixxx-xx openvpn]# tar -zxsf lzo-2.06.tar.gz
[root@lixxx-xx openvpn]# cd lzo-2.06
[root@lixxx-xx lzo-2.06]# ./configure
[root@lixxx-xx lzo-2.06]# make
[root@lixxx-xx lzo-2.06]# make install
Setup the OpenVPN 2.3
[root@lixxx-xx openvpn]# tar -zxsf openvpn-2.3-alpha1.tar.gz
[root@lixxx-xx openvpn]# cd openvpn-2.3-alpha1/
[root@lixxx-xx openvpn-2.3-alpha1]# ./configure
[root@lixxx-xx openvpn-2.3-alpha1]# make
[root@lixxx-xx openvpn-2.3-alpha1]# make install
Prepare the OpenVPN Server

1
2
3
4
[root@lixxx-xx openvpn-2.3-alpha1]# mkdir /etc/openvpn
[root@lixxx-xx openvpn-2.3-alpha1]# cp -r easy-rsa/ /etc/openvpn
[root@lixxx-xx openvpn-2.3-alpha1]# cp sample-config-files/server.conf /etc/openvpn/
[root@lixxx-xx openvpn-2.3-alpha1]# cd /etc/openvpn/easy-rsa/2.0/
Edit the variables

1
[root@lixxx-xx 2.0]# vim vars
//Edit the following values in the file vars in your favorite
export KEY_COUNTRY=”US”
export KEY_PROVINCE=”CA”
export KEY_CITY=”SanFrancisco”
export KEY_ORG=”Fort-Funston”
export KEY_EMAIL=”me@myhost.mydomain”
export KEY_EMAIL=mail@host.domain
Produce Keys
[root@lixxx-xx 2.0]# . /etc/openvpn/easy-rsa/2.0/vars
[root@lixxx-xx 2.0]# . /etc/openvpn/easy-rsa/2.0/clean-all
[root@lixxx-xx 2.0]# . /etc/openvpn/easy-rsa/2.0/build-ca
[root@lixxx-xx 2.0]# . /etc/openvpn/easy-rsa/2.0/build-key-server server
[root@lixxx-xx 2.0]# . /etc/openvpn/easy-rsa/2.0/build-dh
If it doen’t work, excute the command

1
cp openssl-1.0.0.cnf openssl.cnf
Then re-execute those command above.

Next, build clients’ keys

1
[root@lixxx-xx 2.0]# . /etc/openvpn/easy-rsa/2.0/build-key client1
//Relocate the following files to your client machine, by using tools such as pscp/scp
* ca.crt
* client1.crt
* client1.key
eg.
[root@lixxx-xx 2.0]# mkdir ~/client1
[root@lixxx-xx 2.0]# cd keys
[root@lixxx-xx keys]# cp ca.crt client1.crt client1.key ~/client1
[root@lixxx-xx keys]# cd ~
[root@lixxx-xx ~]# cd openvpn/openvpn-2.3-alpha1/sample-config-files/
[root@lixxx-xx sample-config-files]# cp client.conf ~/client1
[root@lixxx-xx ~]# zip -9 -r client1.zip ./client1
//On your Windows Machine, execute the following command (first put pscp.exe in the location)
D:\linode>pscp root@xxx.xxx.xxx.xxx:client1.zip client1.zip
Relocate the following files to make server work properly
* ca.crt
* ca.key
* dh1024.pem
* server.crt
* server.key

1
2
[root@lixxx-xx ~]# cd /etc/openvpn/easy-rsa/2.0/keys
[root@lixxx-xx keys]# cp ca.crt ca.key dh1024.pem server.crt server.key /etc/openvpn
Install the OpenVPN service

 
[root@lixxx-xx ~]# cd ~/openvpn/openvpn-2.3-alpha1/
[root@lixxx-xx openvpn-2.3-alpha1]# cp sample-scripts/openvpn.init /etc/init.d/openvpn
[root@lixxx-xx openvpn-2.3-alpha1]# chkconfig –add openvpn
[root@lixxx-xx openvpn-2.3-alpha1]# chkconfig –level 345 openvpn on
Configure the server

1
[root@lixxx-xx ~]# vim /etc/openvpn/server.conf
//Add the following two lines in the file
push “redirect-gateway def1″
push “dhcp-option DNS 10.8.0.1″
//Save and Quit
[root@lixxx-xx ~]# vim /etc/sysctl.conf
//Edit the value in the file,
net.ipv4.ip_forward = 1
//Save and Quit

 
[root@lixxx-xx ~]# echo 1 > /proc/sys/net/ipv4/ip_forward
[root@lixxx-xx ~]# iptables -A FORWARD -m state –state RELATED,ESTABLISHED -j ACCEPT
[root@lixxx-xx ~]# iptables -A FORWARD -s 10.8.0.0/24 -j ACCEPT
[root@lixxx-xx ~]# iptables -A FORWARD -j REJECT
[root@lixxx-xx ~]# iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
[root@lixxx-xx ~]# vim /etc/rc.local
//Edit the file to make it like this
#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don’t
# want to do the full Sys V style init stuff.
iptables -A FORWARD -m state –state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -s 10.8.0.0/24 -j ACCEPT
iptables -A FORWARD -j REJECT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
/etc/init.d/dnsmasq restart
/etc/init.d/openvpn restart

touch /var/lock/subsys/local
//Save and Quit

1
[root@lixxx-xx ~]# vim /etc/dnsmasq.conf
//Add following content
listen-address=127.0.0.1,10.8.0.1
bind-interfaces
//Save and Quit
Start Service

1
2
3
[root@lixxx-xx ~]# /etc/init.d/openvpn start
[root@lixxx-xx ~]# /etc/init.d/dnsmasq restart
[root@lixxx-xx ~]# chkconfig dnsmasq on
Edit the client1.conf in the zip file which you downloaded form the server
//Add following two line
route-method exe
route-delay 2
//Edit the following lines to match your own environment
remote xxx.xxx.xxx.xxx 1194
ca ca.crt
cert client1.crt
key client1.key
That’s all. If you want to configure IPv6 OpenVPN, just do those editing
1. Editing the /etc/openvpn/server.conf, change the proto udp to proto udp6
2. Execute the command
service openvpn restart
3. Edit the client1.conf, change the server’s IPv4 address to IPv6 address, then change the proto udp to proto udp6

/etc/openvpn/easy-rsa/2.0/

来源：http://www.cyups.com/?p=370

========

OpenVPN IPv6 安装方法

本方法只做参考，最新的openvpn 2.30方法有所改变。