#!/bin/bash
clear
echo?"一個(gè)用于創(chuàng)建虛擬專用網(wǎng)絡(luò)(Virtual?Private?Network)加密通道的免費(fèi)開源軟件。使用Open×××可以方便地在家庭、辦公場(chǎng)所、住宿酒店等不同網(wǎng)絡(luò)訪問場(chǎng)所之間搭建類似于局域網(wǎng)的專用網(wǎng)絡(luò)通道"
echo?-e?""
read?-p?"按回車進(jìn)行安裝...?...?"
clear
cd?/tmp/
if?[?!?-s?lzo-2.09.tar.gz?];then
wget?http://www.oberhumer.com/opensource/lzo/download/lzo-2.09.tar.gz
fi
clear
if?[?!?-s?open***-2.2.2.tar.gz?];then
wget?http://swupdate.open***.org/community/releases/open***-2.2.2.tar.gz?
fi
clear
yum?install?pam-devel?openssl*?gcc??-y
clear
ntpdate?pool.ntp.org
tar?zxf?lzo-2.09.tar.gz
tar?zxf?open***-2.2.2.tar.gz
clear
cd?lzo-2.09/
./configure
make?&&?make?install
clear
cd?../open***-2.2.2/
./configure?--with-lzo-headers=/usr/local/include/?--with-lzo-lib=/usr/local/lib
make?&&?make?install
clear
mkdir?/etc/open***
cd?easy-rsa/2.0/
cp?vars?vars_bak
read?-p?"定義所在國(guó)家(比如中國(guó)就是：CN):?"?dygj
read?-p?"定義所在省份(比如廣西就是：GX):?"?dysf
read?-p?"定義所在城市(比如南寧就是:NanNing):?"?dycs
read?-p?"定義所在組織或公司(比如聯(lián)想就是：Lenovo):?"?dygs
read?-p?"設(shè)置你的電子郵件：?"?dymail
read?-p?"定義所在部門(比如IT部就是:IT):?"?dybm
read?-p?"定義你的名稱：?"?dyname

cat?>?vars?<<EOF
export?EASY_RSA="`pwd`"
export?OPENSSL="openssl"
export?PKCS11TOOL="pkcs11-tool"
export?GREP="grep"
export?KEY_CONFIG=`$EASY_RSA/whichopensslcnf?$EASY_RSA`
export?KEY_DIR="$EASY_RSA/keys"
echo?NOTE:?If?you?run?./clean-all,?I?will?be?doing?a?rm?-rf?on?$KEY_DIR
export?PKCS11_MODULE_PATH="dummy"
export?PKCS11_PIN="dummy"
export?KEY_SIZE=1024
export?CA_EXPIRE=3650
export?KEY_EXPIRE=3650
export?KEY_COUNTRY="$dygj"
export?KEY_PROVINCE="$dysf"
export?KEY_CITY="$dycs"
export?KEY_ORG="$dygs"
export?KEY_EMAIL="$dymail"
export?KEY_EMAIL=$dymail
export?KEY_CN=CN
export?KEY_NAME=dyname
export?KEY_OU=$dybm
export?PKCS11_MODULE_PATH=changeme
export?PKCS11_PIN=1234
EOF

source?./vars
./clean-all
./build-ca
./build-key-server?server
./build-key?$dyname
./build-key-pass?$dyname
./build-dh
open***?--genkey?--secret?keys/ta.key
clear
cp?-arp?/tmp/open***-2.2.2/easy-rsa/2.0/keys?/etc/open***
cp?/tmp/open***-2.2.2/sample-config-files/server.conf?/etc/open***/
cp?/tmp/open***-2.2.2/sample-config-files/client.conf?/etc/open***/
cd?/etc/open***/
cp?server.conf?server.conf_bak

local***ip=`ifconfig?eth0|awk?-F'[?:]+'?'NR==2?{print?$4}'`
cat?>?server.conf?<<EOF
local?$local***ip
port?52115
proto?tcp
dev?tap
ca?/etc/open***/keys/ca.crt?????
cert?/etc/open***/keys/server.crt
key?/etc/open***/keys/server.key
dh?/etc/open***/keys/dh1024.pem
server?10.8.0.0?255.255.255.0
ifconfig-pool-persist?ipp.txt
push?"route?192.168.169.0?255.255.255.0"?
client-to-client
duplicate-cn
keepalive?10?120
comp-lzo
persist-key
persist-tun
status?open***-status.log
log?/var/log/open***.log
verb?3
EOF
sed?-i?'/ip_forward/s/0/1/g'?/etc/sysctl.conf
sysctl?-p
clear
/usr/local/sbin/open***?--config?/etc/open***/server.conf?&
echo?"#startup?open***?service?by?$dybm"?>>?/etc/rc.local
echo?"/usr/local/sbin/open***?--config?/etc/open***/server.conf?&"?>>?/etc/rc.local
cp?/tmp/open***-2.2.2/sample-scripts/open***.init?/etc/init.d/open***

cat?>?/etc/init.d/open***?<<?EOF
line148:?*.conf?-->?server.conf
EOF
chmod?700?/etc/init.d/open***
iptables?-t?nat?-A?POSTROUTING?-o?eth0?-j?MASQUERADE
read?-t?5?-p?"服務(wù)器端安裝配置完成！！！"

轉(zhuǎn)載于:https://blog.51cto.com/wjpingok/1737140

總結(jié)

以上是生活随笔為你收集整理的Open*** 安装脚本的全部?jī)?nèi)容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網(wǎng)站內(nèi)容還不錯(cuò)，歡迎將生活随笔推薦給好友。