Novell LINUX ENTERPRISE DESKTOP 11 - SECURITY GUIDE 17-03-2009 Manual

Also see for LINUX ENTERPRISE DESKTOP 11 - ADMINISTRATION GUIDE 17-03-2009: Administration guide Deployment guide Application guide

Contents

Novell LINUX ENTERPRISE DESKTOP 11 - SECURITY GUIDE 17-03-2009 Manual Manual pdf 164 page image

Configuring Certificates with YaST CAYou can skip this section if you have already configured the certificates with the easy-ca utilties.16.3.2 Configuring the ServerThe configuration file is mostly a summary from /usr/share/doc/packages/openvpn/sample-config-files/server.conf without the comments andwith some small changes to some paths.Example 16.1 VPN Server Configuration File# /etc/openvpn/server.confport 1194 ❶proto udp ❷dev tun0 ❸# Security ❹ca ssl/ca.crtcert ssl/server.crtkey ssl/server.keydh ssl/dh1024.pemserver 10.8.0.0 255.255.255.0 ❺ifconfig-pool-persist /var/run/openvpn/ipp.txt ❻# Privleges ❼user nobodygroup nobody# Other configuration ❽keepalive 10 120comp-lzopersist-keypersist-tunstatus /var/log/openvpn-status.loglog-append /var/log/openvpn.logverb 4❶ The TCP/UDP port to which OpenVPN listens. You have to open up the port inthe Firewall, see Chapter 15, Masquerading and Firewalls (page 131). The standardport for VPN is 1194, so in most cases you can leave that as it is.❷ The protocol, either UDP or TCP.152 Security Guide