centos下安装openvpn服务端

《centos下安装openvpn服务端》由会员上传分享，免费在线阅读，更多相关内容在应用文档-天天文库。

1、[root@mi14soft]#cd/opt/soft[root@mi14soft]#wget http://swupdate.openvpn.org/community/releases/openvpn-2.2.2.tar.gz[root@mi14soft]#rpm-qalzolzo-developensslopenssl-develpampam-develpkcs11-helperpkcs11-helper-developenssl-devel-1.0.1e-30.el6_6.4.x86_64openssl-1.0.1e-30.el6_6.4.x86_64pam-1.1.1-13.el6

2、.x86_64 [root@mi14soft]#yuminstall-ylzo*[root@mi14soft]#rpmbuild-tbopenvpn-2.2.2.tar.gzerror:Failedbuilddependencies:       pam-develisneededbyopenvpn-2.2.2-1.x86_64       pkcs11-helper-develisneededbyopenvpn-2.2.2-1.x86_64提示缺少依赖包[root@mi14soft]#yuminstall-ypam-devel*上传pkcs11-helper-1.08-1.el6.rf.x8

3、6_64.rpm和pkcs11-helper-devel-1.08-1.el6.rf.x86_64.rpm到/opt/soft/[root@mi14soft]#rpm-ivhpkcs11-helper-*编译[root@mi14soft]#rpmbuild-tbopenvpn-2.2.2.tar.gz经过编译后，提示在/root/rpmbuild/RPMS/x86_64/目录下生成openvpn-2.2.2-1.i386.rpm，即可按正常的.rpm的安装方式安装openvpn，也可于用相同系统下的安装。[root@mi14x86_64]#cd  /root/rpmbuild/RPMS/x86

4、_64[root@mi14x86_64]#rpm-ivhopenvpn-2.2.2-1.x86_64.rpm 初始化PKI[root@mi14x86_64]#cd/usr/share/doc/openvpn-2.2.2/easy-rsa/2.0/[root@mi142.0]#vivars修改最后几行初始[root@mi142.0]#vivarsexportKEY_COUNTRY="US"exportKEY_PROVINCE="CA"exportKEY_CITY="SanFrancisco"exportKEY_ORG="Fort-Funston"exportKEY_EMAIL="me@myhos

5、t.mydomain"exportKEY_EMAIL=mail@host.domainexportKEY_CN=changemeexportKEY_NAME=changemeexportKEY_OU=changemeexportPKCS11_MODULE_PATH=changemeexportPKCS11_PIN=1234 改好的exportKEY_COUNTRY="CN"exportKEY_PROVINCE="GD"exportKEY_CITY="BeiJing"exportKEY_ORG="NetSkyStudio"exportKEY_EMAIL="mi14@mi.com"exportKE

6、Y_EMAIL=mi14@mi.comexportKEY_CN=mi14exportKEY_NAME=mi14exportKEY_OU=mi14exportPKCS11_MODULE_PATH=mi14exportPKCS11_PIN=1234 [root@mi14easy-rsa]# cd/usr/share/doc/openvpn-2.2.2/easy-rsa/2.0/[root@mi142.0]#./clean-allPleasesourcethevarsscriptfirst(i.e."source./vars")Makesureyouhaveeditedittoreflectyour

7、configuration.[root@mi142.0]#.varsNOTE:Ifyourun./clean-all,Iwillbedoingarm-rfon/usr/share/doc/openvpn-2.2.2/easy-rsa/2.0/keys[root@mi142.0]#./clean-all建CA证书[root@mi142.0]#./build-caGeneratinga1024bitR