{"id":1264,"date":"2014-02-26T11:47:27","date_gmt":"2014-02-26T19:47:27","guid":{"rendered":"http:\/\/wp.colliertech.org\/cj\/?p=1264"},"modified":"2014-02-26T11:47:27","modified_gmt":"2014-02-26T19:47:27","slug":"openvpn-configs-with-inline-data","status":"publish","type":"post","link":"https:\/\/wp.c9h.org\/cj\/?p=1264","title":{"rendered":"OpenVPN configs with inline data"},"content":{"rendered":"<p>I&#8217;ve been issuing a lot of x.509 certs and OpenVPN user configurations lately, and I came across something that has reduced the complexity quite a bit.  It seems that OpenVPN configuration files can now include data inline.  So rather than generating and distributing the following for each user:<\/p>\n<ul>\n<li>a configuration file<\/li>\n<li>a chain of CA certs<\/li>\n<li>a client certificate<\/li>\n<li>a client key<\/li>\n<li>a tls HMAC authentication file<\/li>\n<li>the OpenVPN client<\/li>\n<\/ul>\n<p>one may distribute to users just the following:<\/p>\n<ul>\n<li>a configuration file with data inline<\/li>\n<li>the OpenVPN client<\/li>\n<\/ul>\n<p>This process and the process of creating new users\/certificates is automated by the fine people who develop <a href=\"http:\/\/openvpn.net\/\">OpenVPN<\/a> itself and the <a href=\"https:\/\/openvpn.net\/index.php\/access-server\/overview.html\">OpenVPN AS<\/a> management software.  It is good to know that if you are unable to use this service, the process is at least much less complicated these days.<\/p>\n<p>One thing to keep in mind is that some platforms do not support all OpenVPN configuration file options.  One in particular that has been giving me trouble is the <i>dev<\/i> and <i>dev-type<\/i> options.  If your configuration file (.ovpn or .conf) is intended for use with Tunnelblick on OSX, be sure to set <i>dev<\/i> to either <b>tun<\/b> or <b>tap<\/b>, and be sure not to use the <i>dev-type<\/i> option.  It seems that the <a href=\"http:\/\/tuntaposx.sourceforge.net\/\">tuntap code on OSX<\/a> does not support arbitrary names for the devices; the device names must be generated by the kernel.<\/p>\n\n<div class=\"twitter-share\"><a href=\"https:\/\/twitter.com\/intent\/tweet?via=cjamescollier\" class=\"twitter-share-button\">Tweet<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>I&#8217;ve been issuing a lot of x.509 certs and OpenVPN user configurations lately, and I came across something that has reduced the complexity quite a bit. It seems that OpenVPN configuration files can now include data inline. So rather than generating and distributing the following for each user: a configuration file a chain of CA [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[252,17,79,47,163,253,250,101,166,86,254,130,251,8,100],"tags":[],"class_list":["post-1264","post","type-post","status-publish","format-standard","hentry","category-centos-software","category-debian","category-free-software","category-linux","category-networking","category-openvpn","category-osx","category-security","category-software","category-tls","category-tuntap","category-ubuntu","category-windows","category-work","category-x509"],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p1YDIB-ko","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/wp.c9h.org\/cj\/index.php?rest_route=\/wp\/v2\/posts\/1264","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.c9h.org\/cj\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.c9h.org\/cj\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.c9h.org\/cj\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.c9h.org\/cj\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1264"}],"version-history":[{"count":4,"href":"https:\/\/wp.c9h.org\/cj\/index.php?rest_route=\/wp\/v2\/posts\/1264\/revisions"}],"predecessor-version":[{"id":1268,"href":"https:\/\/wp.c9h.org\/cj\/index.php?rest_route=\/wp\/v2\/posts\/1264\/revisions\/1268"}],"wp:attachment":[{"href":"https:\/\/wp.c9h.org\/cj\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1264"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.c9h.org\/cj\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1264"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.c9h.org\/cj\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1264"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}