Hi,
wondering if anyone has implemented --tls-auth on their QNAP to secure client connections to the QNAP?
I've used the:
openvpn --genkey --secret ta.key
Documentation mentions:
https://openvpn.net/index.php/open-source/documentation/howto.html#examples
In the server configuration, add:
tls-auth ta.key 0
In the client configuration, add:
tls-auth ta.key 1
I've done a search for *.ovpn & server.conf on NAS and only two files are stated (so must be these), but doesn't mention IP address in it, so the NAS must be manipulating the files before being pulled down from GUI;
[/mnt/ext/opt/vpnopenvpn/etc/openvpn] # more server.conf
port 1194
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/myserver.crt
key /etc/openvpn/keys/myserver.key
auth-user-pass-verify /usr/sbin/vpn_check_account via-env
client-cert-not-required
username-as-common-name
no-name-remapping
dh /etc/openvpn/keys/dh1024.pem
server 172.16.30.0 255.255.255.0
ifconfig-pool-persist /var/log/ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
client-to-client
duplicate-cn
keepalive 10 60
reneg-sec 0
cipher AES-128-CBC
tls-cipher TLS-SRP-SHA-RSA-WITH-3DES-EDE-CBC-SHA:TLS-DHE-RSA-WITH-AES-128-CBC-SHA:TLS-DHE-RSA-WITH-AES-256-CBC-SHA
comp-lzo
max-clients 5
client-connect /etc/openvpn/connect.sh
client-disconnect /etc/openvpn/disconnect.sh
management localhost 7505
persist-key
persist-tun
status /var/log/openvpn-status.log
#log /tmp/openvpn.log
verb 3
[/mnt/ext/opt/vpnopenvpn/etc/openvpn] # more openvpn.ovpn
client
dev tun
script-security 3
proto udp
remote 1194
resolv-retry infinite
nobind
ca ca.crt
auth-user-pass
reneg-sec 0
cipher AES-128-CBC
tls-cipher SRP-RSA-3DES-EDE-CBC-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA
comp-lzo
[/mnt/ext/opt/vpnopenvpn/etc/openvpn] #
Please can anyone help on what I should be editing?
many thanks in advance.
cheers, Adrian
