-
Notifications
You must be signed in to change notification settings - Fork 17
/
openvpn.sh
261 lines (243 loc) · 8.15 KB
/
openvpn.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
#!/bin/bash
PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin
export PATH
# wget https://raw.github.com/mu228/me/master/openvpn.sh && bash openvpn.sh 2>&1 | tee openvpn.log
clear;
# Logo ******************************************************************
CopyrightLogo='
CentOS OpenVPN-2.3.10 云免服务器
Powered by 2015-2016
All Rights Reserved
by 聂人狂
==========================================================================';
echo "$CopyrightLogo";
echo
echo "脚本已由千万人CentOS测试通过"
echo "请按回车继续开始安装："
read
echo
# BOBLEE
echo "正在部署环境..."
sleep 3
service httpd stop >/dev/null 2>&1
yum -y remove httpd >/dev/null 2>&1
service openvpn stop >/dev/null 2>&1
yum -y remove openvpn >/dev/null 2>&1
rm -rf /etc/openvpn/*
rm -rf /home/vpn.tar.gz
echo "安装执行命令..."
sleep 2
yum install -y redhat-lsb curl gawk
version=`lsb_release -a | grep -e Release|awk -F ":" '{ print $2 }'|awk -F "." '{ print $1 }'`
echo "正在匹配软件源..."
sleep 3
if [ $version == "5" ];then
if [ $(getconf LONG_BIT) = '64' ] ; then
rpm -ivh https://raw.github.com/mu228/me/master/64-epel-release-5-4.noarch.rpm
else
rpm -ivh https://raw.github.com/mu228/me/master/32-epel-release-5-4.noarch.rpm
fi
fi
if [ $version == "6" ];then
if [ $(getconf LONG_BIT) = '64' ] ; then
rpm -ivh https://raw.github.com/mu228/me/master/epel-release-6-8.noarch.rpm
else
rpm -ivh https://raw.github.com/mu228/me/master/32-epel-release-6-8.noarch.rpm
fi
fi
if [ $version == "7" ];then
rpm -ivh https://raw.github.com/mu228/me/master/epel-release-latest-7.noarch.rpm
fi
if [ ! $version ];then
clear
echo
echo
echo "安装被终止，请在Centos系统上执行操作..."
echo
# Logo ******************************************************************
CO='
OpenVPN-2.3.10 安装失败
Powered by 9u.cc/yum 2015-2016
All Rights Reserved
==========================================================================';
echo "$CO";
exit
fi
echo "检查并更新软件..."
sleep 3
yum update -y
# OpenVPN Installing ****************************************************************************
echo "配置网络环境..."
sleep 3
myip=`ifconfig | awk -F'[ ]+|:' '/inet addr/{if($4!~/^192.168|^172.16|^10|^127|^0/) print $4}'`
iptables -F >/dev/null 2>&1
service iptables save >/dev/null 2>&1
service iptables restart >/dev/null 2>&1
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE >/dev/null 2>&1
iptables -A INPUT -p TCP --dport 3389 -j ACCEPT >/dev/null 2>&1
iptables -A INPUT -p TCP --dport 80 -j ACCEPT >/dev/null 2>&1
iptables -A INPUT -p TCP --dport 22 -j ACCEPT >/dev/null 2>&1
iptables -t nat -A POSTROUTING -j MASQUERADE >/dev/null 2>&1
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT >/dev/null 2>&1
service iptables save
service iptables restart
chkconfig iptables on
# OpenVPN Installing ****************************************************************************
setenforce 0
cd /etc/
rm -rf ./sysctl.conf
wget https://raw.github.com/mu228/me/master/sysctl.conf
sleep 3
chmod 0755 ./sysctl.conf
sysctl -p
# OpenVPN Installing ****************************************************************************
echo "正在安装主程序..."
sleep 3
yum install -y squid openssl openssl-devel lzo lzo-devel pam pam-devel automake pkgconfig
yum install -y openvpn
# OpenVPN Installing ****************************************************************************
cd /etc/openvpn/
rm -rf ./server.conf
wget https://raw.github.com/mu228/me/master/server.conf
chmod 0755 ./server.conf
cd /etc/squid/
rm -f ./squid.conf
wget https://raw.github.com/mu228/me/master/squid.conf
chmod 0755 /etc/squid/squid.conf
squid -z
squid -s
chkconfig squid on
# OpenVPN Installing ****************************************************************************
cd /etc/openvpn/
wget https://raw.github.com/mu228/me/master/EasyRSA-2.2.2.tar.gz
tar -zxvf EasyRSA-2.2.2.tar.gz >/dev/null 2>&1
cd /etc/openvpn/easy-rsa/
source vars
./clean-all
clear
echo
echo
clear
echo
echo "正在生成CA证书文件..."
echo
sleep 3
echo -e "nnnnnnnn" | ./build-ca
echo -e "nnnnnnnnnn" | ./build-key-server server && echo -e "nnnnnnnnnn" | ./build-key me
./build-ca
clear
echo
echo
echo "正在生成服务端证书，请根据提示输入 y 进行确认，按回车继续"
read
./build-key-server centos
echo
echo
echo "正在生成客户端证书“me”，请根据提示输入 y 进行确认，按回车继续"
read
./build-key me
clear
echo
echo "正在生成SSL加密证书，这是一个漫长的过程..."
sleep 2
./build-dh
# OpenVPN Installing ****************************************************************************
service openvpn start
chkconfig openvpn on
# OpenVPN Installing ****************************************************************************
cp /etc/openvpn/easy-rsa/keys/{ca.crt,me.{crt,key}} /home/ >/dev/null 2>&1
cd /home/ >/dev/null 2>&1
clear
echo
echo
echo "正在生成me.ovpn配置文件..."
echo
echo
echo "写入前端代码"
echo '# 云免配置
# 本文件由系统自动生成
setenv IV_GUI_VER "de.blinkt.openvpn 0.6.17"
machine-readable-output
client
dev tun
connect-retry-max 5
connect-retry 5
resolv-retry 60
########免流代码########
http-proxy-option EXT1 "POST http://rd.go.10086.cn"
http-proxy-option EXT1 "GET http://rd.go.10086.cn"
http-proxy-option EXT1 "X-Online-Host: rd.go.10086.cn"
http-proxy-option EXT1 "POST http://rd.go.10086.cn"
http-proxy-option EXT1 "X-Online-Host: rd.go.10086.cn"
http-proxy-option EXT1 "POST http://rd.go.10086.cn"
http-proxy-option EXT1 "Host: rd.go.10086.cn"
http-proxy-option EXT1 "GET http://rd.go.10086.cn"
http-proxy-option EXT1 "Host: rd.go.10086.cn"' >ovpn.1
echo "写入代理端口"
echo http-proxy $myip 80 >myip
cat ovpn.1 myip>ovpn.2
echo '########免流代码########
' >ovpn.3
cat ovpn.2 ovpn.3>ovpn.4
echo "写入OpenVPN端口"
echo remote $myip 3389 tcp-client >ovpn.5
cat ovpn.4 ovpn.5>ovpn.6
echo "写入中端代码"
sleep 2
echo 'resolv-retry infinite
nobind
persist-key
persist-tun
<ca>' >ovpn.7
cat ovpn.6 ovpn.7>ovpn.8
echo "写入CA证书"
sleep 2
cat ovpn.8 ca.crt>ovpn.9
echo '</ca>
<cert>' >ovpn.10
cat ovpn.9 ovpn.10>ovpn.11
echo "写入客户端证书"
sleep 2
cat ovpn.11 me.crt>ovpn.12
echo '</cert>
<key>' >ovpn.13
cat ovpn.12 ovpn.13>ovpn.14
echo "写入客户端密钥"
sleep 2
cat ovpn.14 me.key>ovpn.15
echo "写入后端代码"
echo '</key>
ns-cert-type server
comp-lzo
verb 3
' >ovpn.16
echo "生成me.ovpn文件"
cat ovpn.15 ovpn.16 >me.ovpn
echo "配置文件制作完毕"
echo
sleep 3
clear
tar -zcvf openvpn.tar.gz ./{me.ovpn,ca.crt,me.{crt,key}}
rm -rf ./{myip,ovpn.1,ovpn.2,ovpn.3,ovpn.4,ovpn.5,ovpn.6,ovpn.7,ovpn.8,ovpn.9,ovpn.10,ovpn.11,ovpn.12,ovpn.13,ovpn.14,ovpn.15,ovpn.16,me.ovpn,ca.crt,me.{crt,key}}
clear
# OpenVPN Installing ****************************************************************************
echo
echo "正在创建下载链接："
echo
sleep 2
echo '=========================================================================='
echo
echo "上传证书文件："
curl --upload-file ./openvpn.tar.gz https://transfer.sh/openvpn.tar.gz
echo
echo "上传成功"
echo "请复制“https://transfer.sh/..”链接到浏览器下载证书/OpenVPN成品配置文件"
echo
echo '=========================================================================='
echo
Client='
OpenVPN-2.3.10 安装完毕
Powered by bbsx.cn 2015-2016
All Rights Reserved
==========================================================================';
echo "$Client";