Скрипт для генерации ключей и сертификатов OpenVPN

rsagen

#!/bin/bash

cd /usr/share/easy-rsa/


echo "Введите название клиента латинскими буквами:"
read CLIENTNAME

. ./vars

./build-key $CLIENTNAME


rm -fr ~/$CLIENTNAME

mkdir ~/$CLIENTNAME
mkdir ~/$CLIENTNAME/crebro_$CLIENTNAME

mv keys/$CLIENTNAME.crt ~/$CLIENTNAME/crebro_$CLIENTNAME/$CLIENTNAME.crt
mv keys/$CLIENTNAME.key ~/$CLIENTNAME/crebro_$CLIENTNAME/$CLIENTNAME.key
cp keys/ca.crt ~/$CLIENTNAME/crebro_$CLIENTNAME/ca.crt
cp ta.key ~/$CLIENTNAME/crebro_$CLIENTNAME/ta.key
rm -f keys/$CLIENTNAME.csr
rm -f keys/*.pem

echo "client
tls-client
dev tap
proto tcp-client
remote 31.186.65.23 110
resolv-retry infinite
nobind
persist-key
persist-tun
nobind
ca crebro_$CLIENTNAME/ca.crt
cert crebro_$CLIENTNAME/$CLIENTNAME.crt
key crebro_$CLIENTNAME/$CLIENTNAME.key
tls-auth crebro_$CLIENTNAME/ta.key 1
cipher DES-CBC3-SHA
cipher BF-CBC
cipher AES-256-CBC
comp-lzo
verb 3
mute 20
" > ~/$CLIENTNAME/crebro_$CLIENTNAME.ovpn


cd ~/$CLIENTNAME

tar -czf openvpn_$CLIENTNAME.tar.gz crebro_$CLIENTNAME.ovpn crebro_$CLIENTNAME