OpenVPN & LZO for the PPC LinkStation - Revision history

Ramuk: /* OpenLink */

Ramuk — Sat, 19 May 2007 17:34:08 GMT

OpenLink

← Older revision		Revision as of 17:34, 19 May 2007
Line 88:		Line 88:

	====Ipkg PowerPC====		====Ipkg PowerPC====
		+	<font color=red> untested</font>
	*Install [[Ipkg on the Linkstation (for end-users)]] and enable the NSLU2 Feed: [[Ipkg Package List: PowerPC]]		*Install [[Ipkg on the Linkstation (for end-users)]] and enable the NSLU2 Feed: [[Ipkg Package List: PowerPC]]
	*Install openvpn		*Install openvpn
	ipkg install openvpn		ipkg install openvpn
		+	=====Configuration=====
		+
		+	Create the TUN device node:<ref>[http://www.nslu2-linux.org/wiki/HowTo/SetUpOpenVPNServer NSLU2-Linux - HowTo / SetUpOpenVPNServer]\</ref>
		+	# mkdir /dev/net
		+	# mknod /dev/net/tun c 10 200
		+	Load the TUN/TAP kernel module:
		+	# insmod tun
		+	Enable routing:
		+	# echo 1 > /proc/sys/net/ipv4/ip_forward
		+
		+	Follow the directions in the OpenVPN 2.0 HOWTO to for instructions on generating certificates and keys for the OpenVPN server and client(s) at http://openvpn.net/howto.html#pki
		+
		+	Create directory /opt/etc/openvpn/easy-rsa/keysCopy and copy the server key files there.
		+
		+	Follow the directions in the OpenVPN 2.0 HOWTO to create configuration files for server and client(s)on http://openvpn.net/howto.html#config
		+
		+	Start the OpenVPN server process from the command line to test connectivity in accordance with the OpenVPN 2.0 HOWTO reference at http://openvpn.net/howto.html#start
		+
		+	# mkdir -p /opt/etc/openvpn/easy-rsa/keys
		+
		+	Follow the directions in the OpenVPN 2.0 HOWTO to create configuration files for server and client(s)on http://openvpn.net/howto.html#config
		+
		+	Start the OpenVPN server process from the command line to test connectivity in accordance with the OpenVPN 2.0 HOWTO reference at http://openvpn.net/howto.html#start

	===FreeLink===		===FreeLink===

Ramuk: /* OpenLink */

Ramuk — Sat, 19 May 2007 12:05:12 GMT

OpenLink

← Older revision		Revision as of 12:05, 19 May 2007
Line 78:		Line 78:

	===OpenLink===		===OpenLink===
		+	====Complile From Source====
	<font color=red>Compilation instructions and required additional files:		<font color=red>Compilation instructions and required additional files:
	* http://hvkls.dyndns.org/downloads/documentation/README-openvpn.txt <ref>http://hvkls.dyndns.org/downloads/documentation/README-openvpn.txt</ref>		* http://hvkls.dyndns.org/downloads/documentation/README-openvpn.txt <ref>http://hvkls.dyndns.org/downloads/documentation/README-openvpn.txt</ref>
	* http://hvkls.dyndns.org/downloads/openvpn_configfiles-ppc.tar.gz		* http://hvkls.dyndns.org/downloads/openvpn_configfiles-ppc.tar.gz
	</font>		</font>
-	====Configuration====	+
		+	=====Configuration=====
	Configuration files following the scheme /etc/openvpn/*.conf will be loaded automatically at system startup <ref>http://openvpn.net/howto.html and http://openvpn.net/examples.html - More information on how to use OpenVPN</ref>		Configuration files following the scheme /etc/openvpn/*.conf will be loaded automatically at system startup <ref>http://openvpn.net/howto.html and http://openvpn.net/examples.html - More information on how to use OpenVPN</ref>
		+
		+	====Ipkg PowerPC====
		+	*Install [[Ipkg on the Linkstation (for end-users)]] and enable the NSLU2 Feed: [[Ipkg Package List: PowerPC]]
		+	*Install openvpn
		+	ipkg install openvpn

	===FreeLink===		===FreeLink===

209.94.50.66: /* OpenLink */

209.94.50.66 — Fri, 27 Oct 2006 03:43:51 GMT

OpenLink

← Older revision		Revision as of 03:43, 27 October 2006
Line 78:		Line 78:

	===OpenLink===		===OpenLink===
-	Compilation instructions and required additional files<ref>http://hvkls.dyndns.org/downloads/documentation/README-openvpn.txt</ref>	+	<font color=red>Compilation instructions and required additional files:
		+	* http://hvkls.dyndns.org/downloads/documentation/README-openvpn.txt <ref>http://hvkls.dyndns.org/downloads/documentation/README-openvpn.txt</ref>
		+	* http://hvkls.dyndns.org/downloads/openvpn_configfiles-ppc.tar.gz
		+	</font>
	====Configuration====		====Configuration====
	Configuration files following the scheme /etc/openvpn/*.conf will be loaded automatically at system startup <ref>http://openvpn.net/howto.html and http://openvpn.net/examples.html - More information on how to use OpenVPN</ref>		Configuration files following the scheme /etc/openvpn/*.conf will be loaded automatically at system startup <ref>http://openvpn.net/howto.html and http://openvpn.net/examples.html - More information on how to use OpenVPN</ref>

209.94.50.66: /* OpenLink */

209.94.50.66 — Fri, 27 Oct 2006 03:41:39 GMT

OpenLink

← Older revision		Revision as of 03:41, 27 October 2006
Line 79:		Line 79:
	===OpenLink===		===OpenLink===
	Compilation instructions and required additional files<ref>http://hvkls.dyndns.org/downloads/documentation/README-openvpn.txt</ref>		Compilation instructions and required additional files<ref>http://hvkls.dyndns.org/downloads/documentation/README-openvpn.txt</ref>
-
-	~~wget http://hvkls.dyndns.org/downloads/openvpn_configfiles-ppc.tar.gz~~
-	~~tar -C / -xvzf openvpn_configfiles-ppc.tar.gz~~
-	~~The compilation procedures:~~
-	*Compilation without LZO:
-	~~./configure --prefix=/usr/local --with-ifconfig-path=/bin/ifconfig --disable-lzo --enable-pthread~~
-	~~make~~
-	~~make install~~
-	*With LZO:
-	~~Get LZO from <http://www.oberhumer.com/opensource/lzo/> and compile it with:~~
-
-	~~wget http://www.oberhumer.com/opensource/lzo/download/lzo-2.02.tar.gz~~
-	~~tar -xvzf lzo-2.02.tar.gz~~
-	~~cd lzo-2.02~~
-	~~./configure --prefix=/usr/local~~
-	~~make~~
-	~~make install~~
-
-	*Compile openvpn
-	~~./configure --prefix=/usr/local --with-ifconfig-path=/bin/ifconfig --with-lzo-headers=/usr/local/include --with-lzo-lib=/usr/local/lib --enable-pthread~~
-	~~make~~
-	~~make install~~
	====Configuration====		====Configuration====
	Configuration files following the scheme /etc/openvpn/*.conf will be loaded automatically at system startup <ref>http://openvpn.net/howto.html and http://openvpn.net/examples.html - More information on how to use OpenVPN</ref>		Configuration files following the scheme /etc/openvpn/*.conf will be loaded automatically at system startup <ref>http://openvpn.net/howto.html and http://openvpn.net/examples.html - More information on how to use OpenVPN</ref>

209.94.50.66: /* OpenLink */

209.94.50.66 — Fri, 27 Oct 2006 03:38:37 GMT

OpenLink

← Older revision		Revision as of 03:38, 27 October 2006
Line 89:		Line 89:
	*With LZO:		*With LZO:
	Get LZO from <http://www.oberhumer.com/opensource/lzo/> and compile it with:		Get LZO from <http://www.oberhumer.com/opensource/lzo/> and compile it with:
-	--prefix=/usr/local	+
		+	wget http://www.oberhumer.com/opensource/lzo/download/lzo-2.02.tar.gz
		+	tar -xvzf lzo-2.02.tar.gz
		+	cd lzo-2.02
		+	./configure --prefix=/usr/local
		+	make
		+	make install
		+
	*Compile openvpn		*Compile openvpn
	./configure --prefix=/usr/local --with-ifconfig-path=/bin/ifconfig --with-lzo-headers=/usr/local/include --with-lzo-lib=/usr/local/lib --enable-pthread		./configure --prefix=/usr/local --with-ifconfig-path=/bin/ifconfig --with-lzo-headers=/usr/local/include --with-lzo-lib=/usr/local/lib --enable-pthread

Ramuk: /* OpenVPN */

Ramuk — Fri, 27 Oct 2006 00:33:57 GMT

OpenVPN

← Older revision		Revision as of 00:33, 27 October 2006
Line 8:		Line 8:

	It allows peers to authenticate to each other using a preshared private key, certificates, or username/password. It makes extensive use of the [[w:OpenSSL\|OpenSSL]] encryption library, and uses the [[w:Transport Layer Security\|SSLv3/TLSv1]] protocol. It is available on Linux, xBSD, Mac OSX, and Windows 2000/XP. It offers a wealth of security and control features. It is not a "web-based" VPN, and is not compatible with [[w:IPsec\|IPsec]] or any other VPN package. The entire package consists of one binary for both client and server connections, an optional configuration file, and one or more key files depending on the authentication method used.		It allows peers to authenticate to each other using a preshared private key, certificates, or username/password. It makes extensive use of the [[w:OpenSSL\|OpenSSL]] encryption library, and uses the [[w:Transport Layer Security\|SSLv3/TLSv1]] protocol. It is available on Linux, xBSD, Mac OSX, and Windows 2000/XP. It offers a wealth of security and control features. It is not a "web-based" VPN, and is not compatible with [[w:IPsec\|IPsec]] or any other VPN package. The entire package consists of one binary for both client and server connections, an optional configuration file, and one or more key files depending on the authentication method used.
		+
		+	Another method for VPN is [[Virtual Private Networking - PPTP\|PPTP]].
	==OpenVPN implementation==		==OpenVPN implementation==
	*'''Encryption''' - OpenVPN uses the [[w:OpenSSL\|OpenSSL]] library to provide [[w:encryption\|encryption]] of both the data and control channels. It lets OpenSSL do all the encryption and authentication work, allowing OpenVPN to use all the ciphers available in the OpenSSL package. It can also use the [[w:HMAC\|HMAC]] packet authentication feature to add an additional layer of security to the connection (referred to as an "HMAC Firewall" by the creator). It can also use hardware acceleration to get better encryption performance.		*'''Encryption''' - OpenVPN uses the [[w:OpenSSL\|OpenSSL]] library to provide [[w:encryption\|encryption]] of both the data and control channels. It lets OpenSSL do all the encryption and authentication work, allowing OpenVPN to use all the ciphers available in the OpenSSL package. It can also use the [[w:HMAC\|HMAC]] packet authentication feature to add an additional layer of security to the connection (referred to as an "HMAC Firewall" by the creator). It can also use hardware acceleration to get better encryption performance.

Ramuk at 21:11, 26 October 2006

Ramuk — Thu, 26 Oct 2006 21:11:08 GMT

← Older revision		Revision as of 21:11, 26 October 2006
Line 3:		Line 3:
	This article Based on work by frontalot and andre. Originally by andre. at Linkstationwiki.org		This article Based on work by frontalot and andre. Originally by andre. at Linkstationwiki.org
	</small></font>''<br>		</small></font>''<br>
-		+	<table align=right><tr><td>http://openvpn.net/images/whirl.jpg</td></tr></table>
	=OpenVPN=		=OpenVPN=
	'''[[w:OpenVPN\|OpenVPN]]'''<ref> [http://openvpn.net/ OpenVPN project homepage]</ref><ref>[[w:OpenVPN\|Wikipedia: OpenVPN]]</ref> is a [[w:virtual private network\|virtual private network]] (VPN) package for creating point-to-point encrypted tunnels between host computers. It was written by [[w:James Yonan\|James Yonan]].		'''[[w:OpenVPN\|OpenVPN]]'''<ref> [http://openvpn.net/ OpenVPN project homepage]</ref><ref>[[w:OpenVPN\|Wikipedia: OpenVPN]]</ref> is a [[w:virtual private network\|virtual private network]] (VPN) package for creating point-to-point encrypted tunnels between host computers. It was written by [[w:James Yonan\|James Yonan]].

Ramuk at 21:06, 26 October 2006

Ramuk — Thu, 26 Oct 2006 21:06:34 GMT

← Older revision		Revision as of 21:06, 26 October 2006
Line 19:		Line 19:
	The current version ppc-openvpn-lzo-v2 features OpenVPN 2.0 and LZO 2.0.1.		The current version ppc-openvpn-lzo-v2 features OpenVPN 2.0 and LZO 2.0.1.

-	<big>'''ppc-openvpn-lzo-v2'''/big>	+	<big>'''ppc-openvpn-lzo-v2'''</big>
	*''' CHANGES'''		*''' CHANGES'''
	*''' COPYRIGHT'''		*''' COPYRIGHT'''

Ramuk: /* Installation */

Ramuk — Thu, 26 Oct 2006 21:05:14 GMT

Installation

← Older revision		Revision as of 21:05, 26 October 2006
Line 14:		Line 14:
	*'''Security''' - OpenVPN offers several internal security features. It runs in [[w:userspace\|userspace]], instead of requiring IP stack (and therefore kernel) operation. OpenVPN has the ability to drop root privileges, use mlockall<ref>[http://www.opengroup.org/onlinepubs/009695399/functions/mlockall.html OpenGroup - mlockall]</ref> to prevent swapping sensitive data to disk, and enter a [[w:chroot jail\|chroot jail]] after initialization.		*'''Security''' - OpenVPN offers several internal security features. It runs in [[w:userspace\|userspace]], instead of requiring IP stack (and therefore kernel) operation. OpenVPN has the ability to drop root privileges, use mlockall<ref>[http://www.opengroup.org/onlinepubs/009695399/functions/mlockall.html OpenGroup - mlockall]</ref> to prevent swapping sensitive data to disk, and enter a [[w:chroot jail\|chroot jail]] after initialization.
	== Installation ==		== Installation ==
		+	===Outdated Method===
		+	{{Warning\| This version is outdated and insecure. Please refer to the compilation instructions (in red) at the bottom of the page!}}
		+
		+	The current version ppc-openvpn-lzo-v2 features OpenVPN 2.0 and LZO 2.0.1.
		+
		+	<big>'''ppc-openvpn-lzo-v2'''/big>
		+	*''' CHANGES'''
		+	*''' COPYRIGHT'''
		+	*''' GPL'''
		+	*''' LGPL'''
		+	*''' README'''
		+	*''' openvpn2-with-lzo-201-v2.tar.gz'''
		+
		+	<big>'''openvpn2-with-lzo-201-v2'''</big>
		+	*''' etc/init.d/openvpn'''
		+	*''' etc/rc.d/rc2.d/S16openvpn'''
		+	*''' usr/local/include/lzo/'''
		+	*''' usr/local/include/lzo/lzoconf.h'''
		+	*''' usr/local/include/lzo/lzodefs.h'''
		+	*''' usr/local/include/lzo/lzoutil.h'''
		+	*''' usr/local/include/lzo/lzo_asm.h'''
		+	*''' usr/local/include/lzo/lzo1.h'''
		+	*''' usr/local/include/lzo/lzo1a.h'''
		+	*''' usr/local/include/lzo/lzo1b.h'''
		+	*''' usr/local/include/lzo/lzo1c.h'''
		+	*''' usr/local/include/lzo/lzo1f.h'''
		+	*''' usr/local/include/lzo/lzo1x.h'''
		+	*''' usr/local/include/lzo/lzo1y.h'''
		+	*''' usr/local/include/lzo/lzo1z.h'''
		+	*''' usr/local/include/lzo/lzo2a.h'''
		+	*''' usr/local/lib/liblzo.a'''
		+	*''' usr/local/lib/liblzo.la'''
		+	*''' usr/local/lib/liblzo2.a'''
		+	*''' usr/local/lib/liblzo2.la'''
		+	*''' usr/local/sbin/openvpn'''
		+	*''' usr/local/man/man8/openvpn.8'''
		+	*''' dev/net/tun'''
		+	*''' dev/tap0'''
		+	*''' dev/tap1'''
		+	*''' dev/tap10'''
		+	*''' dev/tap11'''
		+	*''' dev/tap12'''
		+	*''' dev/tap13'''
		+	*''' dev/tap14'''
		+	*''' dev/tap15'''
		+	*''' dev/tap2'''
		+	*''' dev/tap3'''
		+	*''' dev/tap4'''
		+	*''' dev/tap5'''
		+	*''' dev/tap6'''
		+	*''' dev/tap7'''
		+	*''' dev/tap8'''
		+	*''' dev/tap9'''
		+	*''' lib/modules/2.4.17_mvl21-sandpoint/kernel/drivers/net/tun.o'''
		+
		+	Uncompress the first tarball, which contains a README (etc.) and the tarball with the OpenVPN/LZO files to install onto your system.
		+	tar -xvzf ppc-openvpn-lzo-v2.tar.gz
		+	cd ppc-openvpn-lzo-v2
		+	tar -C / -xvzf openvpn2-with-lzo-201-v2.tar.gz
		+	Configuration files following the scheme /etc/openvpn/*.conf will be loaded automatically at system startup. Please refer to http://openvpn.net/howto.html and http://openvpn.net/examples.html for more information on how to use OpenVPN.
		+
	===OpenLink===		===OpenLink===
	Compilation instructions and required additional files<ref>http://hvkls.dyndns.org/downloads/documentation/README-openvpn.txt</ref>		Compilation instructions and required additional files<ref>http://hvkls.dyndns.org/downloads/documentation/README-openvpn.txt</ref>

Ramuk: /* References */

Ramuk — Thu, 26 Oct 2006 20:57:05 GMT

References

← Older revision		Revision as of 20:57, 26 October 2006
Line 45:		Line 45:

	=References=		=References=
-	<references\>	+	<references/>

	[[Category:LS1]]		[[Category:LS1]]