Skip to content

Instantly share code, notes, and snippets.

@zaourzag
Forked from mkubenka/install.sh
Last active December 11, 2020 15:35
Show Gist options
  • Save zaourzag/694048f6065c255c342201659c112eb6 to your computer and use it in GitHub Desktop.
Save zaourzag/694048f6065c255c342201659c112eb6 to your computer and use it in GitHub Desktop.
OpenVPN Access Server Letsencrypt
#!/bin/sh
apt-get -y install git bc
git clone https://github.com/letsencrypt/letsencrypt /opt/letsencrypt
mkdir /etc/letsencrypt
#!/bin/sh
# https://www.sideras.net/lets-encrypt-https-certificates-for-openvpn-as-access-server/
DOMAIN="vpn1.addzaka.nl"
set -eu
/etc/init.d/openvpnas stop
/usr/local/openvpn_as/scripts/confdba -mk cs.ca_bundle -v "`cat /etc/letsencrypt/live/$DOMAIN/fullchain.pem`"
/usr/local/openvpn_as/scripts/confdba -mk cs.priv_key -v "`cat /etc/letsencrypt/live/$DOMAIN/privkey.pem`" > /dev/null
/usr/local/openvpn_as/scripts/confdba -mk cs.cert -v "`cat /etc/letsencrypt/live/$DOMAIN/cert.pem`"
/etc/init.d/openvpnas start
rsa-key-size = 2048
email = [email protected]
domains = vpn.server.com
authenticator = standalone
standalone-supported-challenges = tls-sni-01
agree-tos = True
keep-until-expiring = True
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment