Ξ welcome to cryptostorm's member forums ~ you don't have to be a cryptostorm member to post here Ξ
Ξ any OpenVPN configs found on the forum are likely outdated. For the latest, visit here or GitHub Ξ
Ξ If you're looking for tutorials/guides, check out the new https://cryptostorm.is/#section6 Ξ

[OpenBSD] Connection Guide.

Guides, HOWTOs etc on how to setup Cryptostorm on PCs, smartphones, tablets and routers.
User avatar

Topic Author
jlg
Posts: 92
Joined: Mon May 05, 2014 2:44 am

[OpenBSD] Connection Guide.

Postby jlg » Fri Nov 14, 2014 6:25 am

Quick 'n' dirty guide to getting connected to Cryptostorm via OpenBSD.

1. Grab the ports.tar.gz
2. Extract to /usr if not done already
3. Change dir into /usr/ports/net/openvpn
4. as root run "make;make install"
5. that's it, you now have a working command line way to connect to CS.

note: I first tried using the package "openvpn" (via pkg_add openvpn) this did not work for some reason but compiling my own did the trick. please also note this guide above assumes you have set PKG_PATH (read the OpenBSD faq for more if you don't know what this or haven't done so).

I kind of assumed you have a fairly solid working knowledge of Linux and how to connect already.

--Privat

User avatar

sysfu
Posts: 55
Joined: Mon Nov 24, 2014 10:22 am

Re: [OpenBSD] Connection Guide.

Postby sysfu » Wed Jun 10, 2015 1:54 am

you might also need to do the following:

  • Create the interface file:
    touch /etc/hostname.tun0
  • If you're configuring the OpenBSD device as a gateway/router for a LAN using a private IP address range, add a NAT translation rule to /etc/pf.conf
    match out on tun inet from !(tun:network) to any nat-to (tun:0)

User avatar

sysfu
Posts: 55
Joined: Mon Nov 24, 2014 10:22 am

Re: [OpenBSD] Connection Guide.

Postby sysfu » Wed Jun 10, 2015 10:13 pm

Forgot to add that the 'txqueuelen 686' line in the OpenVPN configuration file should be commented out as it's apparently not supported on the BSD platform.

User avatar

Topic Author
jlg
Posts: 92
Joined: Mon May 05, 2014 2:44 am

Re: [OpenBSD] Connection Guide.

Postby jlg » Sat Jun 20, 2015 3:43 pm

sysfu wrote:you might also need to do the following:

  • Create the interface file:
    touch /etc/hostname.tun0
  • If you're configuring the OpenBSD device as a gateway/router for a LAN using a private IP address range, add a NAT translation rule to /etc/pf.conf
    match out on tun inet from !(tun:network) to any nat-to (tun:0)


Thanks for picking this up! Much appreciated :-)

--jlg


butahizou
Posts: 1
Joined: Sun Sep 04, 2016 3:56 am

Re: [OpenBSD] Connection Guide.

Postby butahizou » Sun Sep 04, 2016 4:01 am

@OpenBSD users,
This thread has been quiet for a while.. no surprise as everything was working just fine.
But current users should have noticed some issues with the default routes:
add net 0.0.0.0: gateway 10.34.0.1: Too many levels of symbolic links
...

(See: https://marc.info/?l=openbsd-bugs&m=147267568617034&w=2)

Quick workaround:
start 'openvpn your_configfile' as usual
then:

Code: Select all

/sbin/route add 10.34.0.1 -iface `ifconfig tun0 | grep inet | awk {'print $4'}`
/sbin/route add -net 0.0.0.0 10.34.0.1 -netmask 128.0.0.0
/sbin/route add -net 128.0.0.0 10.34.0.1 -netmask 128.0.0.0

This first line make this 10.34.0.1 reachable as a local next-hop.
It's very likely that a better way exists to achieve the same result...but this works...
Have fun.


Return to “guides, HOWTOs & tutorials”

Who is online

Users browsing this forum: No registered users and 8 guests

cron

Login