Generate a user that will be used to login to ocserv. Server-cert = /etc/ocserv/server-cert.pem Uncomment or modify the fields described below. mkdir /etc/ocservĬp server-cert.pem server-key.pem /etc/ocservĮdit the config file under /etc/ocserv. certtool -generate-privkey -outfile server-key.pemĬerttool -generate-certificate -load-privkey server-key.pem -load-ca-certificate ca-cert.pem -load-ca-privkey ca-key.pem -template server.tmpl -outfile server-cert.pemĬopy the key, certificate, and config file to the ocserv config directory. Then, generate the server key and certificate. Please pay attention to the "cn" field, it must match the DNS name or IP address of your server.
Next, create a local server certificate template file ( server.tmpl) with the the content below.
certtool -generate-privkey -outfile ca-key.pemĬerttool -generate-self-signed -load-privkey ca-key.pem -template ca.tmpl -outfile ca-cert.pem You can set your own "cn" and "organization". We create a CA template file ( ca.tmpl) with the content similar to the following. At first, we have to make our own CA cert and server cert.
#CISCO ANYCONNECT VPN CLIENT UBUNTU INSTALL#
apt-get install build-essential pkg-config libgnutls28-dev libwrap0-dev libpam0g-dev libseccomp-dev libreadline-dev libnl-route-3-devĪ sample config file is placed under the directory ocser-0.9.2/doc. The latest stable version of ocserv is 0.9.2.ĭownload ocserv from the official site. Since Ubuntu 14.04 does not ship with ocserv, we will have to download the source code and compile it.
#CISCO ANYCONNECT VPN CLIENT UBUNTU HOW TO#
This article will show you how to install and setup ocserv on Ubuntu 14.04 圆4. At the time of writing, it also has experimental compatibility with clients that use the An圜onnect SSL VPN protocol. OpenConnect server uses the OpenConnect SSL VPN protocol. By design, its goal is to become a secure, lightweight, and fast VPN server. OpenConnect server, also known as ocserv, is a VPN server that communicates over SSL.
0 kommentar(er)
