VPN Setup¶

• Table of contents
• VPN Setup
  • OpenVPN client configuration for Windows, Mac OS X and Linux
    • The configuration file of OpenVPN
  • OpenVPN GUI for Windows
  • OpenVPN GUI for MacOSX - Tunnelblick
  • OpenVPN GUI for Linux - KVpnc
  • OpenVPN Command line

The purpose of this section is to lead the users to configure their OpenVPN connexion to access Terradue's VPN server.
The user authentication will be checked against the X.509 user certificate.

Note that you will always have to manually setup a configuration file.
This file is applicable for OpenVPN on Microsoft Windows, Mac OS X or Linux environments.
This is because the Graphical User Interfaces that we are going to present do not assist you in the creation and maintenance of the OpenVPN's configuration. They only help you to connect and disconnect the VPN, and ask for the username and password if they are required.

To manage the access to the Developer Cloud Sandboxes, you can install a VPN Client on your workstation.
Several OpenVPN-related software packages are described in the sections below, with their step-by-step installation operations.
You will see how to install and configure the most used OpenVPN's GUI for Microsoft Windows, Mac OS X and Linux.

You will also learn to use the OpenVPN's command line interface.
This last possibility is useful, because the "openvpn" command, which you can execute by using the prompt (Unix Shell or Windows Prompt) accepts the same parameters and has the same behavior regardless of which Operating System you use.
In addition, you can use the "openvpn" command in a script to automatically start the VPN connection.

OpenVPN client configuration for Windows, Mac OS X and Linux¶

The configuration file of OpenVPN¶

In order to further simplify the configuration of the OpenVPN client, use the file "t2.ovpn" provided in page attachment:

• Download the generic configuration file by clicking t2.ovpn
  Before using it, you must edit this file, and modify it accordingly to the comments inside.

The file has comments that explain the meaning of the parameters, but only 3 of them you surely need to change to obtain a VPN connection:

• ca /path/to/cacert.pem

The ca parameter specifies a file (in PEM format), that contains the X.509 Certification Authority with which the server certificate has been signed.
You should have downloaded this file with the certificate request confirmation email.
To get the CA's X.509 certificate, you only need to click here:
https://ca.terradue.com/gpodcs/certs/cacert.pem.
Then you must specify the absolute path of the file on your disk.

• cert /path/to/user.pem

• key /path/to/user.pem

The cert parameter specifies a file (in PEM format), that contains your X.509 certificate and key.
To get your X.509 certificate, you must go here:
https://ca.terradue.com/gpodcs/cgi/certdown.cgi
the enter your username, select the PEM format and finally enter your password.

OpenVPN GUI for Windows¶

This section describes the installation steps of the OpenVPN GUI for Windows on a Microsoft Windows XP 32/64 bits.

OpenVPN GUI for MacOSX - Tunnelblick¶

This section describes the installation steps for the Tunnelblick package, a Graphical User Interface for OpenVPN on Mac OS X.

OpenVPN GUI for Linux - KVpnc¶

This section describes the installation steps for the KVpnc frontend for OpenVPN on Linux.

OpenVPN Command line¶

This section describes how to build and install OpenVPN for most of the operating systems, and use it via command lines.