openvpn 修改证书到期时间

2023-07-11 | 0 浏览

openvpn修改证书到期时间

1.脚本自动部署

开源地址是：https://github.com/Nyr/openvpn-install

# 确定该IP地址是服务器公网IP
# 看视频和游戏必须UDP协议
# DNS建议选择2或3
安装命令：wget https://git.io/vpn -O openvpn-install.sh && bash openvpn-install.sh

2.修改脚本中证书时间

oepnvpn创建证书
        # Create the PKI, set up the CA and the server and client certificates
        ./easyrsa --batch init-pki
        ./easyrsa --batch build-ca nopass
        ./easyrsa --batch --days=3650 build-server-full server nopass
        ./easyrsa --batch --days=3650 build-client-full "$client" nopass
        ./easyrsa --batch --days=3650 gen-crl

3.手工签发客户端ovpn

#!/bin/bash

client=$1

new_client () {
        # Generates the custom client.ovpn
        {
        cat /etc/openvpn/server/client-common.txt
        echo "<ca>"
        cat /etc/openvpn/server/easy-rsa/pki/ca.crt
        echo "</ca>"
        echo "<cert>"
        sed -ne '/BEGIN CERTIFICATE/,$ p' /etc/openvpn/server/easy-rsa/pki/issued/"$client".crt
        echo "</cert>"
        echo "<key>"
        cat /etc/openvpn/server/easy-rsa/pki/private/"$client".key
        echo "</key>"
        echo "<tls-crypt>"
        sed -ne '/BEGIN OpenVPN Static key/,$ p' /etc/openvpn/server/tc.key
        echo "</tls-crypt>"
        } > ~/"$client".ovpn
}
/etc/openvpn/server/easy-rsa/easyrsa build-client-full $client nopass
echo "创建证书"
new_client
echo "制作ovpn客户端"

done

Linux