OpenVPN – BAFM

My VPN provider isn’t being supported by the Synology VPN client (because they aren’t using the standard port 1194, instead 1195). After tinkering with the ovpn files the Synology VPN client uses to store the connection settings (and failing), I just installed openvpn with ipkg.

However after tinkering around with the init-script provided by the openvpn ipkg from the NSLU2 feed, I got tired and just rewrote the damn thing:

#!/bin/sh

case $1 in
        start)
                # Enable ipv4_forwarding
                echo 1 > /proc/sys/net/ipv4/ip_forward

                # Create the necessary file structure for /dev/net/tun
                if ( [ ! -c /dev/net/tun ] ); then
                        if ( [ ! -d /dev/net ] ); then
                                mkdir -m 755 /dev/net
                        fi
                        mknod /dev/net/tun c 10 200
                fi

                # Load the tun module if not already loaded
                if ( !(lsmod | grep -q "^tun") ); then
                        insmod /lib/modules/tun.ko
                fi

                # Start the openvpn service
                /opt/sbin/openvpn --daemon --cd /opt/etc/openvpn --config openvpn.conf --writepid /var/run/openvpn.pid
                echo "Started Optware openvpn-client"
                ;;
        stop)
                # Kill the openvpn service
                if [ -f /var/run/openvpn.pid ] ; then
                        # Compare the pidfile and the current pid
                        [ "`cat /var/run/openvpn.pid`" == "`pidof openvpn`" ] && 
                                kill -TERM `pidof openvpn`
                else
                        echo "Stopping Optware openvpn-client: No pidfile found"
                fi

                # Unload the tun module
                if ( (lsmod | grep -q "^tun") ); then
                        rmmod -f tun
                fi

                echo "Stopping Optware openvpn-client"
                ;;
        status)
                # Check the status
                if [ -f /var/run/openvpn.pid ] ; then
                        [ "`cat /var/run/openvpn.pid`" == "`pidof openvpn`" ] && 
                        echo "openvpn-client is running"
                else
                        echo "openvpn-client is stopped"
                fi
                ;;
        reload)
                if [ -f /var/run/openvpn.pid ] ; then
                        [ "`cat /var/run/openvpn.pid`" == "`pidof openvpn`" ] && 
                                kill -HUP `pidof openvpn`
                        echo "Reloading Optware openvpn-client"
                fi
                ;;
        restart)
                $0 stop
                sleep 4
                $0 start
                ;;
esac

#!/bin/sh

case $1 in

start)

# Enable ipv4_forwarding

echo 1 > /proc/sys/net/ipv4/ip_forward

# Create the necessary file structure for /dev/net/tun

if ( [ ! -c /dev/net/tun ] ); then

if ( [ ! -d /dev/net ] ); then

mkdir -m 755 /dev/net

mknod /dev/net/tun c 10 200

# Load the tun module if not already loaded

if ( !(lsmod | grep -q "^tun") ); then

insmod /lib/modules/tun.ko

# Start the openvpn service

/opt/sbin/openvpn --daemon --cd /opt/etc/openvpn --config openvpn.conf --writepid /var/run/openvpn.pid

echo "Started Optware openvpn-client"

;;

stop)

# Kill the openvpn service

if [ -f /var/run/openvpn.pid ] ; then

# Compare the pidfile and the current pid

[ "`cat /var/run/openvpn.pid`" == "`pidof openvpn`" ] &&

kill -TERM `pidof openvpn`

else

echo "Stopping Optware openvpn-client: No pidfile found"

# Unload the tun module

if ( (lsmod | grep -q "^tun") ); then

rmmod -f tun

echo "Stopping Optware openvpn-client"

;;

status)

# Check the status

if [ -f /var/run/openvpn.pid ] ; then

[ "`cat /var/run/openvpn.pid`" == "`pidof openvpn`" ] &&

echo "openvpn-client is running"

else

echo "openvpn-client is stopped"

;;

reload)

if [ -f /var/run/openvpn.pid ] ; then

[ "`cat /var/run/openvpn.pid`" == "`pidof openvpn`" ] &&

kill -HUP `pidof openvpn`

echo "Reloading Optware openvpn-client"

;;

restart)

$0 stop

sleep 4

$0 start

;;

esac

Place the file in /opt/etc/init.d/S20openvpn, and the client daemon will start on boot.

In the past I had toyed with the thought of setting up a VPN-Server at home, so that I could do stuff from elsewhere. Now, I finally got around doing so. First obstacle ? How exactly would I be doing that ?

Get the DD-WRT VPN flavor of course!
Configure the VPN server

Now, the second part seems to be a bit harder. There is a wiki article on how to configure OpenVPN in the DD-WRT wiki, but not for v24 SP1. Lucky me, someone already made himself the work of writing somewhat of a guide down. But, guess according to Murphy’s law, things ain’t ever gonna be easy. As I’m running Ubuntu Karmic on my workbook, the commands ain’t matching the current openvpn package being delivered with Karmic. So here is, intended only as a guide, the list of steps one has to do in order to get the certs …

sudo su -
cd /usr/share/doc/openvpn/examples/easy-rsa/2.0
# Change KEY_COUNTRY, KEY_PROVINCE, KEY_CITY,
# KEY_ORG and KEY_EMAIL with a editor of your choosing
$EDITOR vars
source ./vars
./build-dh
./pkitool --initca
./pkitool --server barfoo.org
./pkitool workbook.home.barfoo.org

sudo su -

cd /usr/share/doc/openvpn/examples/easy-rsa/2.0

# Change KEY_COUNTRY, KEY_PROVINCE, KEY_CITY,

# KEY_ORG and KEY_EMAIL with a editor of your choosing

$EDITOR vars

source ./vars

./build-dh

./pkitool --initca

./pkitool --server barfoo.org

./pkitool workbook.home.barfoo.org

That’s it … all that’s remaining, is copy & pasting those certs into the Web GUI of your OpenVPN router and setting up your client according to the OpenVPN documentation.

S	M	T	W	T	F	S
	1	2	3	4	5	6
7	8	9	10	11	12	13
14	15	16	17	18	19	20
21	22	23	24	25	26	27
28	29	30

Tag: OpenVPN

Synology: New openvpn init script

Setting up a OpenVPN server with DD-WRT