基于web管理OpenVPN服務(wù)的安裝使用詳解

更新時間：2023年02月08日 11:34:52 作者：公眾號:?云原生生態(tài)圈

這篇文章主要為大家介紹了基于web管理OpenVPN服務(wù)的安裝使用詳解，有需要的朋友可以借鑒參考下，希望能夠有所幫助，祝大家多多進(jìn)步，早日升職加薪

正文

服務(wù)名稱	版本	備注
OpenVPN	openvpn-2.4.12-1.el7.x86_64	github有開源一鍵安裝腳本項目
操作系統(tǒng)	CentOS Linux 7 (Core)/Linux 3.10.0-1160.11.1.el7.x86_64
默認(rèn)python	Python 2.7.5
Openvpnas	openvpn-as-2.11.0_794ab41d-CentOS7.x86_64.rpm
openvpn-as-bundled-clients	openvpn-as-bundled-clients-25.rpm

python版本修改

系統(tǒng)默認(rèn)的python版本為2.7.5,此版本對目前的openvpnas依賴的運行時版本來說太低了，因此稍微調(diào)整下版本

rm -rf /usr/bin/python
ln -s /usr/bin/python3.6 /usr/bin/python
#微信訂閱號1：云原生生態(tài)圈
[root@vm-24-13-centos openvpnas]# python --version
Python 3.6.8

安裝openVPN服務(wù)

GitHub上已經(jīng)有人將安裝的過程寫成shell腳本了，我們這里只要去下載然后一鍵安裝就好了。

安裝并生成wahaha用戶的客戶端配置

wget -O openvpn-install.sh https://ghproxy.com/https://github.com/Nyr/openvpn-install/blob/master/openvpn-install.sh
bash ./openvpn-install.sh #按照提示完成安裝即可
# 創(chuàng)建用戶測試openVPN服務(wù)是否正?？捎?
[root@vm-24-13-centos openvpnas]# bash ./openvpn-install.sh
OpenVPN is already installed.
#微信訂閱號2：云原生生態(tài)圈
Select an option:
   1) Add a new client
   2) Revoke an existing client
   3) Remove OpenVPN
   4) Exit
Option: 1
Provide a name for the client:
Name: wahaha # 此處填寫客戶端用戶名
Using SSL: openssl OpenSSL 1.0.2k-fips  26 Jan 2017
Generating a 2048 bit RSA private key
...........+++
...........................................................................................................................+++
writing new private key to '/etc/openvpn/server/easy-rsa/pki/easy-rsa-3528.1YPIvY/tmp.WSJFtM'
-----
Using configuration from /etc/openvpn/server/easy-rsa/pki/easy-rsa-3528.1YPIvY/tmp.M3K3Dv
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
commonName            :ASN.1 12:'wahaha'
Certificate is to be certified until Oct  6 10:25:26 2032 GMT (3650 days)
Write out database with 1 new entries
Data Base Updated
wahaha added. Configuration available in:/root/wahaha.ovpn
#微信訂閱號3：云原生生態(tài)圈
[root@vm-24-13-centos openvpnas]# ls -al /root/wahaha.ovpn # 使用此客戶端配置文件在openVPN connector或者Tunnelblick上測試是否可正常鏈接
-rw-r--r-- 1 root root 4944 Oct  9 18:25 /root/wahaha.ovpn

吊銷wahaha客戶端配置

[root@vm-24-13-centos openvpnas]# bash ./openvpn-install.sh
OpenVPN is already installed.
Select an option:
   1) Add a new client
   2) Revoke an existing client
   3) Remove OpenVPN
   4) Exit
Option: 2
Select the client to revoke:
     1) marionxue
     2) zhangsan
     3) wangwu
     4) sunwei
     5) wahaha
Client: 5
Confirm wahaha revocation? [y/N]: y
Using SSL: openssl OpenSSL 1.0.2k-fips  26 Jan 2017
Using configuration from /etc/openvpn/server/easy-rsa/pki/easy-rsa-6774.jtuovx/tmp.GIgu00
Revoking Certificate 61A8ED5490C8018ACDE6909EF0133B6B.
Data Base Updated
Using SSL: openssl OpenSSL 1.0.2k-fips  26 Jan 2017
Using configuration from /etc/openvpn/server/easy-rsa/pki/easy-rsa-6816.Z2PRCV/tmp.6rZIjZ
#微信訂閱號6：云原生生態(tài)圈
An updated CRL has been created.
CRL file: /etc/openvpn/server/easy-rsa/pki/crl.pem
wahaha revoked!

安裝openvpn web 服務(wù)

在驗證openVPN沒有問題后，即可安裝openvpnas服務(wù)，但是默認(rèn)情況下，此web服務(wù)只允許兩個客戶端鏈接，因此我們需要參考網(wǎng)上的破解的方式，修改一下此限制。下面先安裝一下web服務(wù)。

安裝openvpnas

wget https://openvpn.net/downloads/openvpn-as-latest-CentOS7.x86_64.rpm # openvpn-as-2.11.0_794ab41d-CentOS7.x86_64.rpm
wget https://openvpn.net/downloads/openvpn-as-bundled-clients-latest.rpm # openvpn-as-bundled-clients-25.rpm
yum localinstall -y ./openvpn-as*.rpm
# 檢查openvpn服務(wù)
[root@vm-24-13-centos openvpnas]# systemctl status openvpn-server@server
● openvpn-server@server.service - OpenVPN service for server
   Loaded: loaded (/usr/lib/systemd/system/openvpn-server@.service; enabled; vendor preset: disabled)
   Active: active (running) since Sat 2022-10-08 16:59:55 CST; 1 day 1h ago
     Docs: man:openvpn(8)
           https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
           https://community.openvpn.net/openvpn/wiki/HOWTO
 Main PID: 49185 (openvpn)
   Status: "Initialization Sequence Completed"
   CGroup: /system.slice/system-openvpn\x2dserver.slice/openvpn-server@server.service
           └─49185 /usr/sbin/openvpn --status /run/openvpn-server/status-server.log --status-version 2 --suppress-timestamps --config server.conf
Oct 08 17:03:42 vm-24-13-centos openvpn[49185]: 49.232.x.x:52801 [wangwu] Peer Connection Initiated with [AF_INET]49.232.x.x:52801
Oct 08 17:03:42 vm-24-13-centos openvpn[49185]: wangwu/49.232.x.x:52801 MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=(Not enabled)#微信訂閱號12：云原生生態(tài)圈
Oct 08 17:03:42 vm-24-13-centos openvpn[49185]: wangwu/49.232.x.x:52801 MULTI: Learn: 10.8.0.2 -&gt; wangwu/49.232.x.x:52801
Oct 08 17:03:42 vm-24-13-centos openvpn[49185]: wangwu/49.232.x.x:52801 MULTI: primary virtual IP for wangwu/49.232.x.x:52801: 10.8.0.2
Oct 08 17:03:42 vm-24-13-centos openvpn[49185]: wangwu/49.232.x.x:52801 PUSH: Received control message: 'PUSH_REQUEST'
Oct 08 17:03:42 vm-24-13-centos openvpn[49185]: wangwu/49.232.x.x:52801 SENT CONTROL [wangwu]: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 183.60.83.19,dhcp-option DNS 183.60.82.98,route-gateway 10....6-GCM' (status=1)
Oct 08 17:03:42 vm-24-13-centos openvpn[49185]: wangwu/49.232.x.x:52801 Data Channel: using negotiated cipher 'AES-256-GCM'
Oct 08 17:03:42 vm-24-13-centos openvpn[49185]: wangwu/49.232.x.x:52801 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Oct 08 17:03:42 vm-24-13-centos openvpn[49185]: wangwu/49.232.x.x:52801 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Oct 08 17:04:33 vm-24-13-centos openvpn[49185]: wangwu/49.232.x.x:52801 SIGTERM[soft,remote-exit] received, client-instance exiting
Hint: Some lines were ellipsized, use -l to show in full.
# 檢查openvpn的web服務(wù)openvpnas
[root@vm-24-13-centos openvpnas]# systemctl status openvpnas.service
● openvpnas.service - OpenVPN Access Server
   Loaded: loaded (/usr/lib/systemd/system/openvpnas.service; enabled; vendor preset: disabled)
   Active: active (running) since Sat 2022-10-08 18:46:34 CST; 23h ago
  Process: 31318 ExecStop=/bin/bash /usr/local/openvpn_as/scripts/openvpn_service_cleanup (code=exited, status=0/SUCCESS)
 Main PID: 31332 (python3)
    Tasks: 18
   Memory: 246.0M
   CGroup: /system.slice/openvpnas.service
           ├─31332 python3 -c from pyovpn.sagent.sagent_entry import openvpnas ; openvpnas() --nodaemon --logfile=/var/log/openvpnas.log --pidfile=
           ├─31374 /usr/bin/python3 -c from pyovpn.cserv.wserv_entry import start ; start() -no -u openvpn_as -g openvpn_as --pidfile /usr/local/openvpn_as/etc/tmp/wserv.pid
           ├─31375 /usr/bin/python3 -c from pyovpn.log.logworker import start ; start()
           ├─31394 /usr/bin/python3 -c from pyovpn.sagent.iptworker import start6 ; start6()
           ├─31398 /usr/bin/python3 -c from pyovpn.sagent.iptworker import start ; start()
           ├─31405 openvpn-openssl --errors-to-stderr --config stdin
           ├─31407 openvpn-openssl --errors-to-stderr --config stdin
           └─31459 iptables-restore -n
Oct 08 18:46:34 vm-24-13-centos systemd[1]: Started OpenVPN Access Server.

修改用戶限制

網(wǎng)絡(luò)上有存在不同版本的編譯文件，不想使用的可以直接去找，我們這里使用的是最新的openvpnas服務(wù)，需要自己手動修改下

備份安裝目錄下的pyovpn-2.0-py3.6.egg文件

[root@vm-24-13-centos openvpnas]# cd /usr/local/openvpn_as/lib/python/
[root@vm-24-13-centos python]# cp pyovpn-2.0-py3.6.egg{,.back}
[root@vm-24-13-centos python]# ls -alh|grep pyovpn
drwxr-xr-x 37 root root 4.0K Oct  8 18:08 pyovpn
-rw-r--r--  1 root root 5.8M Oct  8 18:45 pyovpn-2.0-py3.6.egg
-rw-r--r--  1 root root 5.7M Oct  8 17:28 pyovpn-2.0-py3.6.egg.back #這是備份出來的文件
-rwxr-xr-x  1 root root  19K Jun 15 22:28 pyovpnc.cpython-36m-x86_64-linux-gnu.so

編譯補(bǔ)丁文件

[root@vm-24-13-centos openvpnas]# cd /root/openvpnas
[root@vm-24-13-centos openvpnas]# mkdir compile &amp;&amp; cd $_
[root@vm-24-13-centos compile]# cp /usr/local/openvpn_as/lib/python/pyovpn-2.0-py3.6.egg .
[root@vm-24-13-centos compile]# unzip -q ./pyovpn-2.0-py3.6.egg
[root@vm-24-13-centos compile]# ls
common  EGG-INFO  pyovpn  pyovpn-2.0-py3.6.egg
[root@vm-24-13-centos compile]# cd pyovpn/lic/
[root@vm-24-13-centos lic]# ls -a
.  ..  conf  info.pyc  __init__.pyc  ino.pyc  lbcs.pyc  lbq.pyc  lic_entry.pyc  licerror.pyc  lichelper.pyc  lickey.pyc  licser.pyc  licstore.pyc  liman.pyc  lspci.pyc  prop.pyc  uprop.pyc  vprop.pyc
[root@vm-24-13-centos lic]# mv uprop.pyc uprop2.pyc
[root@vm-24-13-centos lic]# vim uprop.py
[root@vm-24-13-centos lic]# cat uprop.py
from pyovpn.lic import uprop2
old_figure = None
def new_figure(self, licdict):
      ret = old_figure(self, licdict)
      ret['concurrent_connections'] = 6666
      return ret
#微信訂閱號：云原生生態(tài)圈
for x in dir(uprop2):
      if x[:2] == '__':
         continue
      if x == 'UsageProperties':
         exec('old_figure = uprop2.UsageProperties.figure')
         exec('uprop2.UsageProperties.figure = new_figure')
      exec('%s = uprop2.%s' % (x, x))
[root@vm-24-13-centos lic]# python -O -m compileall uprop.py &amp;&amp; mv __pycache__/uprop.*.pyc uprop.pyc
Compiling 'uprop.py'...
# 最后打包一下就結(jié)束了
[root@vm-24-13-centos lic]# cd ../../
[root@vm-24-13-centos compile]# zip -rq pyovpn-2.0-py3.6.egg ./pyovpn ./EGG-INFO ./common

替換補(bǔ)丁文件，重啟服務(wù)

cp ./pyovpn-2.0-py3.6.egg /usr/local/openvpn_as/lib/python/
systemctl restart openvpnas.service

使用openvpn賬號登錄

新版本會在openvpnas安裝的時候初始化openvpn的密碼

grep -i 'password.$' /usr/local/openvpn_as/init.log

配置客戶端

在完成以上操作且驗證沒問題之后，就可以創(chuàng)建部分用戶，來體驗一下

從以上來看，不同的客戶端用戶可以分配不同的權(quán)限，以及客戶端賬號的認(rèn)證方式等等，創(chuàng)建完成之后，使用客戶端用戶的賬號以及密碼登錄openvpnas,下載客戶端連接工具以及自助生成客戶端的配置文件：訪問地址為:https://ip:943/

登錄之后，即可下載客戶端軟件以及創(chuàng)建對應(yīng)的配置文件了

創(chuàng)建完成之后，在管理后臺也可以管理用戶的配置文件

下載配置文件后，即可在推薦的openvpn-connect或者Tunnelblick上打開使用了。

使用OpenVPN AS.不僅僅可以在web瀏覽器上更方便管理用戶和權(quán)限，也能更方便的吊銷證書等，同時也更大的化的方便客戶端人員的使用。

到此，OpenVPNAS的主要介紹的就這些了，更多關(guān)于web管理OpenVPN服務(wù)安裝的資料請關(guān)注腳本之家其它相關(guān)文章！

您可能感興趣的文章:

如何在Ubuntu上通過Docker部署OpenVPN服務(wù)器

欧美bbbwbbbw肥妇,免费乱码人妻系列日韩,一级黄片

基于web管理OpenVPN服務(wù)的安裝使用詳解

目錄

正文

python版本修改

安裝openVPN服務(wù)

安裝openvpn web 服務(wù)

安裝openvpnas

修改用戶限制

相關(guān)文章

最新評論

大家感興趣的內(nèi)容

最近更新的內(nèi)容

常用在線小工具