Hi, thanks for the post.
I'm also trying to develop a VPN for personal use, between me and my friends, do you have any tips on how to generate the credentials for each user automatically ?
Show HN: A small bootstrapped independent VPN company in the Netherlands
101–110 of 111 posts
Re: Show HN: A small bootstrapped independent VPN company in the Netherlands
#102I don't care about your stack or disclosing who you are just please don't lie to us about logging. Either you log everything or you log nothing or you encrypt everything and throw away the key or something. Dissidents and journalists everywhere will thank you.
What can I say, part of the OpenVPN config:
status /dev/null
log /dev/null
verb 0
Part of the IPSec config:
charondebug="asn -1, cfg -1, chd -1, dmn -1, enc -1, esp -1, ike -1, imc -1, imv -1, job -1, knl -1, lib -1, mgr -1, net -1, pts -1, tls -1, tnc -1"
(-1 means absolutely silent)
There are no client connect/disconnect scripts active.
Authorization, Accounting and Authentication log queries in FreeRadius are disabled.
All name server logging is disabled.
iOS subscription receipt validation logging is disabled.
Communication in between servers (for example vpnserver -> dbserver) is encrypted with OpenVPN.
Re: Show HN: A small bootstrapped independent VPN company in the Netherlands
#103Hi, thanks for the post. I'm also trying to develop a VPN for personal use, between me and my friends, do you have any tips on how to generate the credentials for each user automatically ?
Using a database for user authentication, you could write a script to fill the database with some usernames and passwords.
Or create a webfrontend for users to register their own usernames and passwords.
Re: Show HN: A small bootstrapped independent VPN company in the Netherlands
#104Hi, thanks for the post. I'm also trying to develop a VPN for personal use, between me and my friends, do you have any tips on how to generate the credentials for each user automatically ?
Using a database for user authentication, you could write a script to fill the database with some usernames and passwords. Or create a webfrontend for users to register their own usernames and passwords.
Yes thanks thats a good idea, I was also wondering how OpenVPN behaves with different connections, if it can handle multiple users simultaneously or not
Re: Show HN: A small bootstrapped independent VPN company in the Netherlands
#105Earlier quoted context omitted.
Using a database for user authentication, you could write a script to fill the database with some usernames and passwords. Or create a webfrontend for users to register their own usernames and passwords.
Yes thanks thats a good idea, I was also wondering how OpenVPN behaves with different connections, if it can handle multiple users simultaneously or not
More specifically, if I have to manually generate keys for each user or if there is a way to automatically generate them
Re: Show HN: A small bootstrapped independent VPN company in the Netherlands
#106Earlier quoted context omitted.
Yes thanks thats a good idea, I was also wondering how OpenVPN behaves with different connections, if it can handle multiple users simultaneously or not
More specifically, if I have to manually generate keys for each user or if there is a way to automatically generate them
OpenVPN has the duplicate-cn option available, two connections with the same common name are then allowed.
Re: Show HN: A small bootstrapped independent VPN company in the Netherlands
#107Earlier quoted context omitted.
More specifically, if I have to manually generate keys for each user or if there is a way to automatically generate them
OpenVPN has the duplicate-cn option available, two connections with the same common name are then allowed.
I see, thay may prove helpful but it doesnt really answer my question, can you be more explicit about your answer ?
Re: Show HN: A small bootstrapped independent VPN company in the Netherlands
#108Earlier quoted context omitted.
OpenVPN has the duplicate-cn option available, two connections with the same common name are then allowed.
I see, thay may prove helpful but it doesnt really answer my question, can you be more explicit about your answer ?
You could generate a certificate for each user, but without the duplicate-cn option a user is only allowed 1 connection to the same server. You can also use username/password authentication instead of certificates, also in this case you'll need to set the duplicate-cn option to allow multiple connections from the same user to the same server, because in this case you use the option username-as-common-name and the CN (common name) will then be the username.
Re: Show HN: A small bootstrapped independent VPN company in the Netherlands
#109Earlier quoted context omitted.
Using a database for user authentication, you could write a script to fill the database with some usernames and passwords. Or create a webfrontend for users to register their own usernames and passwords.
Yes thanks thats a good idea, I was also wondering how OpenVPN behaves with different connections, if it can handle multiple users simultaneously or not
To answer this question: yes, OpenVPN can handle multiple users/connections simultaneously.
Re: Show HN: A small bootstrapped independent VPN company in the Netherlands
#110Earlier quoted context omitted.
Yes thanks thats a good idea, I was also wondering how OpenVPN behaves with different connections, if it can handle multiple users simultaneously or not
More specifically, if I have to manually generate keys for each user or if there is a way to automatically generate them
To maybe better answer this question, I've found this for example: https://gist.github.com/hcooper/814247