Skip to content

OpenVPN module for VPN into FreedomBox

Sunil Mohan Adapa requested to merge SunilMohanAdapa:openvpn into master

Created by: SunilMohanAdapa

  • Authentication using client certificates. Extra password based authentication for later.
  • Auto setup of CA, server and client certificates.
  • Provides a .ovpn profile for each user for easy setup.
  • Use 4096 bit Diffie-Hellman parameters for better security. If this takes to much time, reduce it to 2048 or 1024, at least during debugging.

Future improvements:

  • Run as non-root, work with Debian.
  • Reduce key size to 2048 bits based on feedback if 4096 is taking too much time.
  • Add user authentication using password and LDAP.
  • Implement certificate revocation
  • Better representation for remote server's host name.
  • Add Manual page for OpenVPN

Merge request reports