abe openvpn timesift first release

network/connection/openvpn/files/openvpn-test.sh

@@ -0,0 +1,25 @@
+#!/bin/bash
+
+# Test Crypto:
+./openvpn --genkey --secret key
+./openvpn --test-crypto --secret key
+
+# Randomize ports for tests to avoid conflicts on the build servers.
+cport=$[ 50000 + ($RANDOM % 15534) ]
+sport=$[ $cport + 1 ]
+sed -e 's/^\(rport\) .*$/\1 '$sport'/' \
+-e 's/^\(lport\) .*$/\1 '$cport'/' \
+    < sample-config-files/loopback-client \
+    > tmp-loopback-client
+sed -e 's/^\(rport\) .*$/\1 '$cport'/' \
+-e 's/^\(lport\) .*$/\1 '$sport'/' \
+< sample-config-files/loopback-server \
+> tmp-loopback-server
+
+# Test SSL/TLS negotiations (runs for 2 minutes):
+./openvpn --config tmp-loopback-client &
+
+./openvpn --config tmp-loopback-server
+wait
+
+rm -f tmp-loopback-client tmp-loopback-server

network/connection/openvpn/files/peercred.patch

@@ -0,0 +1,10 @@
+--- socket.c.orig	2010-01-14 16:26:16.880369350 +0200
++++ socket.c	2010-01-14 16:26:26.359374160 +0200
+@@ -22,6 +22,7 @@
+  *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+  */
+ 
++#define _GNU_SOURCE
+ #include "syshead.h"
+ 
+ #include "socket.h"

network/connection/openvpn/files/pkcs11.patch

@@ -0,0 +1,17 @@
+--- easy-rsa/2.0/openssl.cnf.orig	2010-01-14 16:27:51.977369194 +0200
++++ easy-rsa/2.0/openssl.cnf	2010-01-14 16:29:54.090381299 +0200
+@@ -283,9 +283,9 @@
+ #pkcs11 = pkcs11_section
+ 
+ [ pkcs11_section ]
+-engine_id = pkcs11
+-dynamic_path = /usr/lib/engines/engine_pkcs11.so
+-MODULE_PATH = $ENV::PKCS11_MODULE_PATH
+-PIN = $ENV::PKCS11_PIN
+-init = 0
++#engine_id = pkcs11
++#dynamic_path = /usr/lib/engines/engine_pkcs11.so
++#MODULE_PATH = $ENV::PKCS11_MODULE_PATH
++#PIN = $ENV::PKCS11_PIN
++#init = 0
+ 

network/connection/openvpn/files/roadwarrior-client.conf

@@ -0,0 +1,38 @@
+#########################################
+# Sample client-side OpenVPN config file
+# for connecting to multi-client server.
+#
+# Adapted from http://openvpn.sourceforge.net/20notes.html
+#
+# The server can be pinged at 10.8.0.1.
+#
+# This configuration can be used by multiple
+# clients, however each client should have
+# its own cert and key files.
+#
+# tun-style tunnel
+
+port 1194
+dev tun
+remote [my server hostname or IP address]
+
+# TLS parms
+
+tls-client
+ca sample-keys/tmp-ca.crt
+cert sample-keys/client.crt
+key sample-keys/client.key
+
+# This parm is required for connecting
+# to a multi-client server.  It tells
+# the client to accept options which
+# the server pushes to us.
+pull
+
+# Scripts can be used to do various
+# things (change nameservers, for
+# example.
+#up scripts/ifup-post
+#down scripts/ifdown-post
+
+verb 4

network/connection/openvpn/files/roadwarrior-server.conf

@@ -0,0 +1,67 @@
+########################################
+# Sample OpenVPN config file for
+# 2.0-style multi-client udp server
+#
+# Adapted from http://openvpn.sourceforge.net/20notes.html
+#
+# tun-style tunnel
+
+port 1194
+dev tun
+
+# Use "local" to set the source address on multi-homed hosts
+#local [IP address]
+
+# TLS parms
+tls-server 
+ca sample-keys/tmp-ca.crt
+cert sample-keys/server.crt
+key sample-keys/server.key
+dh sample-keys/dh1024.pem
+
+# Tell OpenVPN to be a multi-client udp server
+mode server
+
+# The server's virtual endpoints
+ifconfig 10.8.0.1 10.8.0.2
+
+# Pool of /30 subnets to be allocated to clients.
+# When a client connects, an --ifconfig command
+# will be automatically generated and pushed back to
+# the client.
+ifconfig-pool 10.8.0.4 10.8.0.255
+
+# Push route to client to bind it to our local
+# virtual endpoint.
+push "route 10.8.0.1 255.255.255.255"
+
+# Push any routes the client needs to get in
+# to the local network.
+push "route 192.168.0.0 255.255.255.0"
+
+# Push DHCP options to Windows clients.
+push "dhcp-option DOMAIN example.com"
+push "dhcp-option DNS 192.168.0.1"
+push "dhcp-option WINS 192.168.0.1"
+
+# Client should attempt reconnection on link
+# failure.
+keepalive 10 60
+
+# Delete client instances after some period
+# of inactivity.
+inactive 600
+
+# Route the --ifconfig pool range into the
+# OpenVPN server.
+route 10.8.0.0 255.255.255.0
+
+# The server doesn't need privileges
+user openvpn
+group openvpn
+
+# Keep TUN devices and keys open across restarts.
+persist-tun
+persist-key
+
+verb 4

network/connection/openvpn/files/tmpfiles.conf

@@ -0,0 +1 @@
+d /run/openvpn 0755 root root