VPN Galileo

VPN PPTP/L2TP:

indirizzo server concentratore: vpn1.csgalileo.org
username e password

yay -S networkmanager-l2tp networkmanager-strongswan

aggiungere vpn L2TP

pptp manual

/etc/NetworkManager/system-connections/galileo.nmconnection

[connection]
id=galileo
uuid=97852b85-b57b-4b38-9687-d919f2820e57
type=vpn
autoconnect=false
permissions=user:scipio:;
timestamp=1623922800
 
[vpn]
gateway=94.230.76.2
mru=1400
mtu=1400
password-flags=0
user=xxx
user-auth-type=password
service-type=org.freedesktop.NetworkManager.l2tp
 
[vpn-secrets]
password=xxx
 
[ipv4]
dns-search=
ignore-auto-dns=true
method=auto
 
[ipv6]
addr-gen-mode=stable-privacy
dns-search=
method=disabled
 
[proxy]

chmod 600 /etc/NetworkManager/system-connections/galileo.nmconnection

change:

permissions=user:scipio:; (this is local linux user)
user=xxx
password=xxx

pptp GUI

Installare il package networkmanager-pptp

Aggiungere una VPN pptp

galileo openvpn

Server certificate

ca.crt

GUI

ubuntu

sudo apt install network-manager-openvpn-gnome
sudo service network-manager restart

arch: pacman -S networkmanager-openvpn

add VPN connection with network manager GUI:

type: openvpn
gateway: vpn1.csgalileo.org
user: <user>
pass: <pass>
CA certificate: <ca.crt>
in advanced settings check “Use TCP connection”
in route add 10.0.0.0/8 and 185.91.188.0/25

Console

sudo apt install openvpn

auth.cfg

<user>
<pass>

openvpn.conf

client
dev tun
proto tcp-client
remote vpn1.csgalileo.org
port 1194
nobind
persist-key
persist-tun
tls-client
remote-cert-tls server
ca cert_export_CA-VPNCONC-MEUCCI.crt
cert cert_export_client-VPNCONC-MEUCCI-adalcason.crt
key cert_export_client-VPNCONC-MEUCCI-adalcason.key
verb 1
mute 20
auth SHA1
auth-user-pass login.conf
cipher AES-256-CBC
;cipher AES-256-GCM
auth-retry interact
;route-gateway 172.22.22.1
route 10.0.0.0 255.0.0.0
route 172.16.0.0 255.240.0.0
route 94.230.77.0 255.255.255.0
route 94.230.78.0 255.255.255.0
route 94.230.79.0 255.255.255.0
route 109.104.240.0 255.255.252.0
route 185.91.188.0 255.255.252.0
#log-append log.txt
askpass chiave.config
 
providers legacy default
data-ciphers-fallback BF-CBC
compat-mode 2.3.18

go

sudo openvpn --config openvpn.conf

Connect with

./go

Winzozz

c:\Program Files\OpenVPN\config\auth_galileo.cfg

username
password

c:\Program Files\OpenVPN\config\galileo.ovpn

client
dev tun
proto tcp-client
remote-cert-tls server
 
remote vpn.csgalileo.org 1194
route 10.0.0.0 255.0.0.0 vpn_gateway 3
route 185.91.188.0 255.255.255.0 vpn_gateway 3
 
resolv-retry infinite
nobind
persist-key
persist-tun
verb 3
auth-user-pass auth_galileo.cfg
script-security 3
<ca>
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIJAKI/infDrLAoMA0GCSqGSIb3DQEBCwUAMIGlMQswCQYD
VQQGEwJJVDELMAkGA1UECBMCVlIxDzANBgNVBAcTBlZlcm9uYTEQMA4GA1UEChMH
R2FsaWxlbzEQMA4GA1UECxMHR2FsaWxlbzETMBEGA1UEAxMKR2FsaWxlbyBDQTEQ
MA4GA1UEKRMHRWFzeVJTQTEtMCsGCSqGSIb3DQEJARYec3RlZmFuby5zY2lwaW9u
aUBjc2dhbGlsZW8ub3JnMB4XDTE3MDMyMjE1MDQ0NFoXDTI3MDMyMDE1MDQ0NFow
gaUxCzAJBgNVBAYTAklUMQswCQYDVQQIEwJWUjEPMA0GA1UEBxMGVmVyb25hMRAw
DgYDVQQKEwdHYWxpbGVvMRAwDgYDVQQLEwdHYWxpbGVvMRMwEQYDVQQDEwpHYWxp
bGVvIENBMRAwDgYDVQQpEwdFYXN5UlNBMS0wKwYJKoZIhvcNAQkBFh5zdGVmYW5v
LnNjaXBpb25pQGNzZ2FsaWxlby5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDgxKb1DORrR5kZhTz1oj4ronvQaU8oyBc71y5oxp70XwIEQkW+87WT
lgfeT8fwqec6KIjQr6SJOhMmIDphYifN1gwseJ4rtLf33WZOsWgWNOeLjxcn354g
M26pWJt3ETP3THUu4dK4Y6T7t7dFJiaIZ0jRg15EIKHsfMZDYRtcl5Sc0EBw4G32
TndnWsy+vJRocM0zkniuDnNnI1GJh3MOLK+/nskOAJO22+vmYJcE3fMsjho2zJgB
qUteWn5pBZm91Q2KQa5W5OQYVNPA4wbopQHxhhEXGDDwm+iQsqjBQVK39TQDwBGS
foMxbPZwr17pJGbhhHGVNm8DP+XnTltFAgMBAAGjggEOMIIBCjAdBgNVHQ4EFgQU
6kM1PEOCDJ+cqiazQu70mrXni+AwgdoGA1UdIwSB0jCBz4AU6kM1PEOCDJ+cqiaz
Qu70mrXni+ChgaukgagwgaUxCzAJBgNVBAYTAklUMQswCQYDVQQIEwJWUjEPMA0G
A1UEBxMGVmVyb25hMRAwDgYDVQQKEwdHYWxpbGVvMRAwDgYDVQQLEwdHYWxpbGVv
MRMwEQYDVQQDEwpHYWxpbGVvIENBMRAwDgYDVQQpEwdFYXN5UlNBMS0wKwYJKoZI
hvcNAQkBFh5zdGVmYW5vLnNjaXBpb25pQGNzZ2FsaWxlby5vcmeCCQCiP4p3w6yw
KDAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAYkF8O1NFJD0G5bJNn
hy4R7qStYnbELKFosI1KJ4Oz+ibYZxAOCOyURpacJq9NPYAS/P8SA4lHDjhe3ZIq
kNGq1ZxCHIsGWhagHFDHru2ct4nKtyEFSAzzy7UAnQITeTBZkEjDENWncdb41+VA
fJRoM8O1kj3+Kn0Zpwn126pp8/at3oyC4RMXM2FEztege5J93ZfogW/MuNyL4Jlv
iCGKzo/9UtjUGiHbuxUv7SimWYB4OAhrYR1t0sMLLJU7Bu012PEmxeyK6G1zJuBC
3/YQ9xlWkXlbp1E03OvBMCRp1AnJRsznZATBB4xnJ55ZPG6tEqCVS72j2fKMnCa2
vlW7
-----END CERTIFICATE-----
</ca>

Lavagno

lavagno.pem