Skip to content

Latest commit

 

History

History
42 lines (40 loc) · 1.41 KB

README.md

File metadata and controls

42 lines (40 loc) · 1.41 KB
Raw

Setup

  • Run the followings to set up local and cloud.
git clone https://github.com/OpenVPN/easy-rsa.git
cd easy-rsa/easyrsa3
./easyrsa init-pki
./easyrsa build-ca  # add your passphrase
./easyrsa build-server-full server nopass
./easyrsa build-client-full client1.domain.tld nopass
mkdir ~/my-vpn-files/
cp pki/ca.crt ~/my-vpn-files/
cp pki/issued/server.crt ~/my-vpn-files/
cp pki/private/server.key ~/my-vpn-files/
cp pki/issued/client1.domain.tld.crt ~/my-vpn-files
cp pki/private/client1.domain.tld.key ~/my-vpn-files/
cd ~/my-vpn-files/
terraform init
terraform apply -auto-approve
  • AWS Console > VPN Endpoint > download client configuration > downloaded-client-config.ovpn
  • In downloaded-client-config.ovpn, above reneg-sec 0 and below </ca>, insert followings...
<cert>
# ...from client1.domain.tld.cert wrapped (Don't include this line)
-----BEGIN CERTIFICATE-----
xxxxxx
-----END CERTIFICATE-----
</cert>

<key>
# ...from client1.domain.tld.key wrapped (Don't include this line)
-----BEGIN PRIVATE KEY-----
xxxxxx
-----END PRIVATE KEY-----
</key>
  • Import downloaded-client-config.ovpn to openvpn client.

References

  1. https://spak.no/blog/article/63f519260faeadeeeb968af2
  2. https://www.youtube.com/watch?v=Bv70DoHDDCY
  3. https://aws.amazon.com/blogs/database/accessing-an-amazon-rds-instance-remotely-using-aws-client-vpn/#:~:text=AWS%20Client%20VPN%20can%20provide,to%20your%20resources%20on%20AWS.