TurnKey OpenVPN Live CD is an open source distribution of Linux based on the Debian GNU/Linux operating system and built around the well known OpenVPN software. It is an appliance that is specifically tailored for people who are looking for a totally free and easy-to-use solution for deploying dedicated OpenVPN servers.
OpenVPN is an open source, lightweight, cost-effective, and full-featured open source SSL VPN solution that features remote access, Wi-Fi security, site-to-site VPNs, and much more. The appliance comes with all of the necessary upstream OpenVPN configurations and uses the root username for the Webmin and SSH components.
All the OpenVPN profiles are tweaked to support TLS/SSL certificates for key exchange and user authentication, the gateway and server deployments feature a custom script that allows users to add clients, as well as to generate certificates and keys.
In addition, a unified profile in the OVPN format is available in the appliance to enable clients to easily connect to the OpenVPN server, and various initialization hooks have been added for easy configuration of server, client and gateway profiles.
Another interesting feature is the ability to create expiring obfuscated HTTPS URLs, which enable clients to download their profiles on mobile devices, simply by using QR code scanners. Furthermore, a private subnet configuration allows clients to connect to servers that are behind the OpenVPN server.
It is also important to mention here that, for extra security, the OpenVPN server has been configured to drop privileges and uses TLS-Auth for HMAC (Hash-based Message Authentication Code) signature verification. while protecting against SSL/TLS buffer overflow vulnerabilities, port scanning, port flooding, and DoS attacks.
The appliance is distributed as Live CD ISO images for the 32-bit and 64-bit architectures. In addition to the Live CDs, it is also available for download as virtual images for OpenStack, Xen, OpenVZ, OVF and OpenNode virtualization technologies.
What is new in this release:
- Support encrypted private key (optional).
- Fix addclient private subnet problem [#772].
- Fix OpenVPN trademark compliance (updated readme & logo) [#774].
- Fix /etc/cron.hourly/openvpn-profiles-delexpired cronjob [#800].
- Installed security updates.
What is new in version 13.0:
- OpenVPN related:
- Inithook supporting server, gateway, client profiles (convenience).
- Custom openvpn-addclient script generating client profile (convenience).
- Expiring obfuscated profile download urls with QR code (convenience, security).
- Supports SSL/TLS certificates for auth and key exchange (security).
- Configured to drop privilages (security).
- Configured to run in chroot jail dedicated to CRL (security).
- Configured to use TLS-Auth HMAC verification (security).
Comments not found