1a1e916c52
include:
Adding a highly scalable server for handling multiple TCP/UDP
clients over point-to-point TUN interfaces, all using a single
port number. The server has been designed so that it can run with
reduced privilege.
On the client side, "pull" has been added, which basically says
"accept certain config file options which the server pushes back
to you." The major win of the push/pull capability is that the
same client configuration file can be used on each client provided
each client has its own set of SSL/TLS keys which have been signed
by the master CA.
A management interface has been developed which can be used to
remotely control or centrally manage an OpenVPN daemon.
"remote" can now specify a set of machines, or a hostname can be
configured with multiple addresses in DNS. A server will be
randomly chosen from the list, and if the connect fails, another
will be tried (see the "remote-random" option)
A package for easy RSA key management (easy-rsa-2.0rc1) has been
included to aid in generating SSL keys and certificates for use
with OpenVPN.
26 lines
864 B
Text
26 lines
864 B
Text
===========================================================================
|
|
$NetBSD: MESSAGE,v 1.1 2005/08/17 19:55:57 jlam Exp $
|
|
|
|
The openvpn rc.d script looks for configuration files in:
|
|
|
|
${PKG_SYSCONFDIR}
|
|
|
|
and by default will start an openvpn process for each config file in
|
|
that directory.
|
|
|
|
The sample configuration files have been installed into:
|
|
|
|
${PREFIX}/share/examples/openvpn/config
|
|
|
|
Please refer to the openvpn(8) manpage for full documentation on the
|
|
available options.
|
|
|
|
There is also a package for ``easy'' RSA key management installed into:
|
|
|
|
${PREFIX}/share/openvpn/easy-rsa
|
|
|
|
that may optionally be used to set up a certificate authority for
|
|
generating SSL certificates for use with OpenVPN. Please refer to the
|
|
README file in that directory for specific instructions.
|
|
|
|
===========================================================================
|