Developer Cloud Sandboxes solution

h1. VPN Setup

{{>toc}}

The purpose of this section is to lead the users to configure their OpenVPN connexion to access Terradue's VPN server.

The user authentication will be checked against the X.509 user certificate. 

Note that you will always have to manually setup a configuration file.

This file is applicable for OpenVPN on Microsoft Windows, Mac OS X or Linux environments.

This is because the Graphical User Interfaces that we are going to present do not assist you in the creation and maintenance of the OpenVPN's configuration. They only help you to connect and disconnect the VPN, and ask for the username and password if they are required.

To manage the access to the Developer Cloud Sandboxes, you can install a VPN Client on your workstation.

Several OpenVPN-related software packages are described in the sections below, with their step-by-step installation operations.

You will see how to install and configure the most used OpenVPN's GUI for Microsoft Windows,  Mac OS X and Linux. 

You will also learn to use the OpenVPN's command line interface. 

This last possibility is useful, because the "openvpn" command, which you can execute by using the prompt (Unix Shell or Windows Prompt) accepts the same parameters and has the same behavior regardless of which Operating System you use. 

In addition, you can use the "openvpn" command in a script to automatically start the VPN connection.

h2. OpenVPN client configuration for Windows, Mac OS X and Linux

h3. The configuration file of OpenVPN

In order to further simplify the configuration of the OpenVPN client, use the file "t2.ovpn" provided in page attachment:

* Download the generic configuration file by clicking "t2.ovpn":https://support.terradue.com/attachments/download/22/t2.ovpn

Before using it, you must edit this file, and modify it accordingly to the comments inside.

The file has comments that explain the meaning of the parameters, but only 3 of them you surely need to change to obtain a VPN connection:

* ca /path/to/cacert.pem

The ca parameter specifies a file (in PEM format), that contains the X.509 Certification Authority with which the server certificate has been signed. 

You should have downloaded this file with the certificate request confirmation email.

To get the CA's X.509 certificate, you only need to click here: 

https://ca.terradue.com/gpodcs/certs/cacert.pem. 

Then you must specify the absolute path of the file on your disk.

* cert /path/to/user.pem

* key /path/to/user.pem

The cert parameter specifies a file (in PEM format), that contains your X.509 certificate and key. 

To get your X.509 certificate, you must go here: 

https://ca.terradue.com/gpodcs/cgi/certdown.cgi

the enter your username, select the PEM format and finally enter your password.

h2. [[OpenVPN| OpenVPN GUI for Windows]]

This section describes the installation steps of the OpenVPN GUI for Windows on a Microsoft Windows XP 32/64 bits.

h2. [[Tunnelblick for MacOSX| OpenVPN GUI for MacOSX - Tunnelblick]]

This section describes the installation steps for the Tunnelblick package, a Graphical User Interface for OpenVPN on Mac OS X.

h2. [[KVpnc for Linux|OpenVPN GUI for Linux - KVpnc]]

This section describes the installation steps for the KVpnc frontend for OpenVPN on Linux.

h2. [[OpenVPN Command line]]

This section describes how to build and install OpenVPN for most of the operating systems, and use it via command lines.