OpenVPN Support Forum

Code: Select all

export LD_LIBRARY_PATH=/services/bin

Code: Select all

export LD_LIBRARY_PATH=./

Code: Select all

#!/bin/bash
export LD_LIBRARY_PATH=$PWD/bin
bin/openvpn --config config/client.ovpn

Code: Select all

client
dev tun
proto udp
remote x
nobind
;user nobody
;group nobody
persist-key
persist-tun
ca config/ca.crt
cert config/mimiko.crt
key config/mimiko.key
ns-cert-type server
comp-lzo
;log         openvpn.log
log-append  log/openvpn.log
verb 2
keepalive 10 120
route-delay 20 20

Code: Select all

ca conf_dir/ca.crt
cert conf_dir/mimiko.crt
key conf_dir/mimiko.key
ns-cert-type server
comp-lzo
;log         openvpn.log
log-append  log_dir/openvpn.log

Code: Select all

ifconfig-pool-persist log/ipp.server.txt
;user nobody
;group nobody
status log/openvpn.server.status.log
log-append  log/openvpn.server.log

Code: Select all

# This is the configuration file for /etc/init.d/openvpn

#
# Start only these VPNs automatically via init script.
# Allowed values are "all", "none" or space separated list of
# names of the VPNs. If empty, "all" is assumed.
#
#AUTOSTART="all"
#AUTOSTART="none"
#AUTOSTART="home office"
#
# Refresh interval (in seconds) of default status files
# located in /var/run/openvpn.$NAME.status
# Defaults to 10, 0 disables status file generation
#
#STATUSREFRESH=10
#STATUSREFRESH=0
# Optional arguments to openvpn's command line
OPTARGS=""

Code: Select all

#!/bin/sh -e

### BEGIN INIT INFO
# Provides:          vpn
# Required-Start:    $network $local_fs
# Required-Stop:     $network $local_fs
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Short-Description: Openvpn VPN service
### END INIT INFO

# Original version by Robert Leslie
# <rob@mars.org>, edited by iwj and cs
# Modified for openvpn by Alberto Gonzalez Iniesta <agi@inittab.org>
# Modified for restarting / starting / stopping single tunnels by Richard Mueller <mueller@teamix.net>

cd $(dirname $(readlink -f $0))
cd ..

OPENVPN_DIR=$PWD
BIN_DIR=bin
CONFIG_DIR=config
CONFIG_EXT=ovpn
LOG_DIR=log
LIB_DIR=lib
export LD_LIBRARY_PATH=$OPENVPN_DIR/$BIN_DIR:$OPENVPN_DIR/$LIB_DIR

. /lib/lsb/init-functions

test $DEBIAN_SCRIPT_DEBUG && set -v -x

DAEMON=$OPENVPN_DIR/$BIN_DIR/openvpn
DESC="virtual private network daemon"
# CONFIG_DIR=/etc/openvpn
test -x $DAEMON || exit 0
test -d $OPENVPN_DIR/$CONFIG_DIR || exit 0

# Source defaults file; edit that file to configure this script.
AUTOSTART="all"
STATUSREFRESH=10
if test -e $OPENVPN_DIR/$CONFIG_DIR/openvpn.default ; then
  . $OPENVPN_DIR/$CONFIG_DIR/openvpn.default
fi

start_vpn () {
    if grep -q '^[	 ]*daemon' $OPENVPN_DIR/$CONFIG_DIR/$NAME.$CONFIG_EXT ; then
      # daemon already given in config file
      DAEMONARG=
    else
      # need to daemonize
      DAEMONARG="--daemon ovpn-$NAME"
    fi

    if grep -q '^[	 ]*status ' $CONFIG_DIR/$NAME.$CONFIG_EXT ; then
      # status file already given in config file
      STATUSARG=""
    elif test $STATUSREFRESH -eq 0 ; then
      # default status file disabled in /etc/default/openvpn
      STATUSARG=""
    else
      # prepare default status file
      STATUSARG="--status $OPENVPN_DIR/$LOG_DIR/openvpn.$NAME.status $STATUSREFRESH"
    fi

    log_progress_msg "$NAME"
    STATUS=0

    # Check to see if it's already started...
    if test -e $OPENVPN_DIR/$LOG_DIR/openvpn.$NAME.pid ; then
      log_failure_msg "Already running (PID file exists)"
      STATUS=0
    else
      $DAEMON $OPTARGS --writepid $OPENVPN_DIR/$LOG_DIR/openvpn.$NAME.pid \
	      $DAEMONARG $STATUSARG --cd $OPENVPN_DIR \
	      --config $CONFIG_DIR/$NAME.$CONFIG_EXT || STATUS=1
    fi
}
stop_vpn () {
  kill `cat $PIDFILE` || true
  rm -f $PIDFILE
  rm -f $OPENVPN_DIR/$LOG_DIR/openvpn.$NAME.status 2> /dev/null
}

case "$1" in
start)
  log_daemon_msg "Starting $DESC"

  # autostart VPNs
  if test -z "$2" ; then
    # check if automatic startup is disabled by AUTOSTART=none
    if test "x$AUTOSTART" = "xnone" -o -z "$AUTOSTART" ; then
      log_warning_msg " Autostart disabled."
      exit 0
    fi
    if test -z "$AUTOSTART" -o "x$AUTOSTART" = "xall" ; then
      # all VPNs shall be started automatically
      for CONFIG in `cd $OPENVPN_DIR/$CONFIG_DIR; ls *.$CONFIG_EXT 2> /dev/null`; do
        NAME=${CONFIG%%.$CONFIG_EXT}
        start_vpn
      done
    else
      # start only specified VPNs
      for NAME in $AUTOSTART ; do
        if test -e $OPENVPN_DIR/$CONFIG_DIR/$NAME.$CONFIG_EXT ; then
          start_vpn
        else
          log_failure_msg "No such VPN: $NAME"
          STATUS=1
        fi
      done
    fi
  #start VPNs from command line
  else
    while shift ; do
      [ -z "$1" ] && break
      if test -e $OPENVPN_DIR/$CONFIG_DIR/$1.$CONFIG_EXT ; then
        NAME=$1
        start_vpn
      else
       log_failure_msg " No such VPN: $1"
       STATUS=1
      fi
    done
  fi
  log_end_msg ${STATUS:-0}

  ;;
stop)
  log_daemon_msg "Stopping $DESC"

  if test -z "$2" ; then
    for PIDFILE in `ls $OPENVPN_DIR/$LOG_DIR/openvpn.*.pid 2> /dev/null`; do
      NAME=`echo $PIDFILE | cut -c18-`
      NAME=${NAME%%.pid}
      stop_vpn
      log_progress_msg "$NAME"
    done
  else
    while shift ; do
      [ -z "$1" ] && break
      if test -e $OPENVPN_DIR/$LOG_DIR/openvpn.$1.pid ; then
        PIDFILE=`ls $OPENVPN_DIR/$LOG_DIR/openvpn.$1.pid 2> /dev/null`
        NAME=`echo $PIDFILE | cut -c18-`
        NAME=${NAME%%.pid}
        stop_vpn
        log_progress_msg "$NAME"
      else
        log_failure_msg " (failure: No such VPN is running: $1)"
      fi
    done
  fi
  log_end_msg 0
  ;;
# Only 'reload' running VPNs. New ones will only start with 'start' or 'restart'.
reload|force-reload)
 log_daemon_msg "Reloading $DESC"
  for PIDFILE in `ls $OPENVPN_DIR/$LOG_DIR/openvpn.*.pid 2> /dev/null`; do
    NAME=`echo $PIDFILE | cut -c18-`
    NAME=${NAME%%.pid}
# If openvpn if running under a different user than root we'll need to restart
    if egrep '^[[:blank:]]*user[[:blank:]]' $OPENVPN_DIR/$CONFIG_DIR/$NAME.conf > /dev/null 2>&1 ; then
      stop_vpn
      sleep 1
      start_vpn
      log_progress_msg "(restarted)"
    else
      kill -HUP `cat $PIDFILE` || true
    log_progress_msg "$NAME"
    fi
  done
  log_end_msg 0
  ;;

# Only 'soft-restart' running VPNs. New ones will only start with 'start' or 'restart'.
soft-restart)
 log_daemon_msg "$DESC sending SIGUSR1"
  for PIDFILE in `ls $OPENVPN_DIR/$LOG_DIR/openvpn.*.pid 2> /dev/null`; do
    NAME=`echo $PIDFILE | cut -c18-`
    NAME=${NAME%%.pid}
    kill -USR1 `cat $PIDFILE` || true
    log_progress_msg "$NAME"
  done
  log_end_msg 0
 ;;

restart)
  shift
  $0 stop ${@}
  sleep 1
  $0 start ${@}
  ;;
cond-restart)
  log_daemon_msg "Restarting $DESC."
  for PIDFILE in `ls $OPENVPN_DIR/$LOG_DIR/openvpn.*.pid 2> /dev/null`; do
    NAME=`echo $PIDFILE | cut -c18-`
    NAME=${NAME%%.pid}
    stop_vpn
    sleep 1
    start_vpn
  done
  log_end_msg 0
  ;;
*)
  echo "Usage: $0 {start|stop|reload|restart|force-reload|cond-restart}" >&2
  exit 1
  ;;
esac

exit 0

# vim:set ai sts=2 sw=2 tw=0:

Code: Select all

ln -s /services/openvpn/config/openvon.init.d /etc/init.d/openvpn

Code: Select all

update-rc.d openvpn defaults 16 80