- OpenVPN Cookbook - Second Edition
- OpenVPN Cookbook - Second Edition
- Credits
- About the Author
- About the Reviewer
- www.PacktPub.com
- Customer Feedback
- Preface
- 1. Point-to-Point Networks
- 2. Client-server IP-only Networks
- Introduction
- Setting up the public and private keys
- A simple configuration
- Server-side routing
- Adding IPv6 support
- Using client-config-dir files
- Routing - subnets on both sides
- Redirecting the default gateway
- Redirecting the IPv6 default gateway
- Using an ifconfig-pool block
- Using the status file
- The management interface
- Proxy ARP
- 3. Client-server Ethernet-style Networks
- 4. PKI, Certificates, and OpenSSL
- Introduction
- Certificate generation
- OpenSSL tricks - x509, pkcs12, verify output
- Revoking certificates
- The use of CRLs
- Checking expired/revoked certificates
- Intermediary CAs
- Multiple CAs - stacking, using the capath directive
- Determining the crypto library to be used
- Crypto features of OpenSSL and PolarSSL
- Pushing ciphers
- Elliptic curve support
- 5. Scripting and Plugins
- 6. Troubleshooting OpenVPN - Configurations
- Introduction
- Cipher mismatches
- TUN versus TAP mismatches
- Compression mismatches
- Key mismatches
- Troubleshooting MTU and tun-mtu issues
- Troubleshooting network connectivity
- Troubleshooting client-config-dir issues
- Troubleshooting multiple remote issues
- Troubleshooting bridging issues
- How to read the OpenVPN log files
- 7. Troubleshooting OpenVPN - Routing
- Introduction
- The missing return route
- Missing return routes when iroute is used
- All clients function except the OpenVPN endpoints
- Source routing
- Routing and permissions on Windows
- Unable to change Windows network location
- Troubleshooting client-to-client traffic routing
- Understanding the MULTI: bad source warnings
- Failure when redirecting the default gateway
- 8. Performance Tuning
- 9. OS Integration
- Introduction
- Linux - using NetworkManager
- Linux - using pull-resolv-conf
- Windows - elevated privileges
- Windows - using the CryptoAPI store
- Windows - updating the DNS cache
- Windows - running OpenVPN as a service
- Windows - public versus private network adapters
- Windows - routing methods
- Windows 8+ - ensuring DNS lookups are secure
- Android - using the OpenVPN for Android clients
- Push-peer-info - pushing options to Android clients
- 10. Advanced Configuration
- Introduction
- Including configuration files in config files
- Multiple remotes and remote-random
- Inline certificates
- Connection blocks
- Details of ifconfig-pool-persist
- Connecting using a SOCKS proxy
- Connecting via an HTTP proxy
- Connecting via an HTTP proxy with authentication
- IP-less setups - ifconfig-noexec
- Port sharing with an HTTPS server
- Routing features - redirect-private, allow-pull-fqdn
- Filtering out pushed options
- Handing out the public IPs
In this chapter, we will cover:
- Certificate generation
- OpenSSL tricks: x509, pkcs12, verify output
- Revoking certificates
- The use of CRLs
- Checking expired/revoked certificates
- Intermediary CAs
- Multiple CAs: stacking, using the
capathdirective - Determining which crypto library is used
- Crypto features of OpenSSL and PolarSSL
- Pushing ciphers
- Elliptic curve support
This chapter is a small detour into the public key infrastructures (PKIs), certificates, and openssl commands. The primary purpose of the recipes in this chapter is to show how the certificates, which are used in OpenVPN, can be generated, managed, viewed, and what kind of interactions exist between OpenSSL and OpenVPN.
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.