Skip to content

Instantly share code, notes, and snippets.

@yuq-1s
Last active February 15, 2022 08:06
Show Gist options
  • Save yuq-1s/d68239e6be98d83b03e1ffe32653012e to your computer and use it in GitHub Desktop.
Save yuq-1s/d68239e6be98d83b03e1ffe32653012e to your computer and use it in GitHub Desktop.
Setup SJTU VPN connection from Ubuntu 16.04 desktop
# Install dependencies
sudo apt install libcurl4-openssl-dev iptables-dev autoconf libgmp3-dev libssl-dev pkg-config
# Install StrongSwan
wget http://download.strongswan.org/strongswan-5.6.1.tar.bz2
tar xjvf strongswan-5.6.1.tar.bz2 && cd strongswan-5.6.1
# FIXME: Some of these options may be redundant, but they work on my laptop.
autoconf && ./configure \
--prefix=/usr/local \
--sysconfdir=/etc \
--enable-acert \
--enable-addrblock \
--enable-aesni \
--enable-chapoly \
--enable-connmark \
--enable-coupling \
--enable-error-notify \
--enable-gcm \
--enable-integrity-test \
--enable-lookip \
--enable-openssl \
--enable-curl \
--enable-eap-identity \
--enable-eap-mschapv2 \
--enable-cmd \
--disable-blowfish \
--disable-cmac \
--disable-des \
--disable-dnskey \
--disable-fast \
--disable-ikev1 \
--disable-md5 \
--disable-pkcs1 \
--disable-rc2 \
--disable-sha1 \
--disable-sshkey \
--disable-xcbc
make && sudo make install
# Install certificates
sudo wget -O /etc/ipsec.d/certs/isrgrootx1.pem https://letsencrypt.org/certs/isrgrootx1.pem.txt
# sudo wget -O /etc/ipsec.d/certs/lets-encrypt-x3-cross-signed.pem https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem.txt
sudo wget -O /etc/ipsec.d/certs/letsencryptauthorityx3.pem https://letsencrypt.org/certs/letsencryptauthorityx3.pem.txt
# Turn on VPN with the following command. You will be prompted to enter password.
# TODO: fill in "YOUR_JACCOUNT"
# TODO: remove 'stu' in --host if you are not a student
# sudo charon-cmd --host stu.vpn.sjtu.edu.cn --identity "YOUR_JACCOUNT" \
# --cert /etc/ipsec.d/certs/letsencryptauthorityx3.pem \
# --cert /etc/ipsec.d/certs/isrgrootx1.pem
@YJHelloWorld
Copy link

Thanks a lot.

@YJHelloWorld
Copy link

Hi, it's connecting to the VPN successfully now. But could you please tell me how can I stop the connection: I shut down the process but it's still connecting...

@yuq-1s
Copy link
Author

yuq-1s commented Jun 10, 2019

@YJHelloWorld Sorry, I share the same problem with you. Currently I disconnect the VPN by reconnecting to wifi.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment