{"id":4171,"date":"2018-02-12T15:32:47","date_gmt":"2018-02-12T20:32:47","guid":{"rendered":"https:\/\/www.globo.tech\/learning-center\/?p=4171"},"modified":"2018-02-12T15:32:47","modified_gmt":"2018-02-12T20:32:47","slug":"install-openvpn-centos-7","status":"publish","type":"post","link":"https:\/\/www.globo.tech\/learning-center\/install-openvpn-centos-7\/","title":{"rendered":"How to Install OpenVPN on CentOS 7"},"content":{"rendered":"

How to Install OpenVPN on CentOS 7<\/h1>\n
\n
\n

OpenVPN\u00ae<\/b><\/a> is open-source software that lets the user implement and create virtual private networks; these networks serve as a secure connection between two points, allowing traffic to move unobstructed while remaining private and secure. OpenVPN allows peers to use a pre-shared secret key, certificate, or username and password combination to authenticate traffic and communications. It can also function in multi-client environments, providing each client with an authentication certificate from the server.<\/p>\n<\/div>\n

\n\"openvpn_logo\"\n<\/div>\n<\/div>\n

OpenVPN was first published in 2001 and has become a favorite VPN solution for multiple platforms and device types; OpenVPN functions on Windows, Mac OS X, iOS, Android, and many Linux-style systems. Additionally, OpenVPN has been enhanced and modified for use across different router firmware implementations. <\/p>\n

Getting Started<\/h2>\n

To get started installing OpenVPN, you will need a node running on a cloud server<\/b><\/a>, dedicated server<\/b><\/a>, or virtual private server; your operational needs or personal preference can be the deciding factor. When you’ve chosen a node, it will need to have an up-to-date version of CentOS 7<\/b><\/a> running.<\/p>\n

CentOS 7 is a popular Linux-style operating system and you can learn more about the CentOS Project on the project website.<\/p>\n

Additionally, you may choose to use a domain or sub-domain later in this guide. If you’re choosing to use a domain or sub-domain, you may want to set this up before setting up OpenVPN.<\/p>\n

How to Install OpenVPN on CentOS 7<\/h2>\n

Once you’ve chosen your cloud, dedicated, or virtual private server node, verified your CentOS 7 installation, and have root access available, you’re ready to begin. As mentioned above, if you are using a domain or sub-domain for this setup, you may want to have that available before walking through the steps to install OpenVPN.<\/p>\n

The first step during this installation is to make sure your server node is up-to-date and then reboot, processing any updates if needed:
\nyum update -y && sleep 5 && reboot<\/code><\/p>\n

After your system reboots, you can install the EPEL (Extra Packages for Enterprise Linux) repository:
\nyum install epel-release -y<\/code><\/p>\n

When complete, it’s time to install OpenVPN and EasyRSA (a small key management package for use with OpenVPN) for generating RSA keys:
\nyum install openvpn easy-rsa -y<\/code><\/p>\n

Once OpenVPN and EasyRSA are installed, you can copy the example configuration:
\ncp \/usr\/share\/doc\/openvpn-*\/sample\/sample-config-files\/server.conf \/etc\/openvpn<\/code><\/p>\n

Now it’s time to edit the server configuration file:
\nnano \/etc\/openvpn\/server.conf<\/code><\/p>\n

This step is optional, but if you want to push all traffic through the VPN, you will want to uncomment the following line:
\ndh dh2048.pem
\nuser nobody
\ngroup nobody<\/code><\/p>\n

After you’ve edited the configuration file, create a folder to store the key. Then copy the key and the script:
\nmkdir -p \/etc\/openvpn\/easy-rsa\/keys
\ncp -rf \/usr\/share\/easy-rsa\/2.0\/* \/etc\/openvpn\/easy-rsa<\/code><\/p>\n

When you’ve finished copying the keys and script, you can edit the vars file to make changes to the default value:
\nnano \/etc\/openvpn\/easy-rsa\/vars<\/code><\/p>\n

Now copy the OpenSSL configuration:
\n# These are the default values for fields
\n# which will be placed in the certificate.
\n# Don't leave any of these fields blank.
\nexport KEY_COUNTRY=\"CA\"
\nexport KEY_PROVINCE=\"QC\"
\nexport KEY_CITY=\"Montreal\"
\nexport KEY_ORG=\"Globotech\"
\nexport KEY_EMAIL=\"abuse@example.com\"
\nexport KEY_OU=\"IT\"
\n# X509 Subject Field
\nexport KEY_NAME=\"server\"
\nexport KEY_CN=vpn.example.com<\/code><\/p>\n

Then copy the OpenSSL configuration:
\ncp \/etc\/openvpn\/easy-rsa\/openssl-1.0.0.cnf \/etc\/openvpn\/easy-rsa\/openssl.cnf<\/code><\/p>\n

It’s time to start generating keys and certificates. Then you can load the vars file to automate the setup process:
\ncd \/etc\/openvpn\/easy-rsa
\nsource .\/vars<\/code><\/p>\n

Before proceeding, we want to use a fresh install to clean up a bit. Make sure to do this on a fresh install, since you will lose all your certificates:
\n<\/code><\/p>\n

After cleaning up, we’re going to generate keys making sure to match our KEY_NAME value:
\n.\/build-ca
\n.\/build-key-server server
\n.\/build-dh<\/code><\/p>\n

Take the generated key, copy it, and place the copy in your OpenVPN folder:
\ncd \/etc\/openvpn\/easy-rsa\/keys
\ncp dh2048.pem ca.crt server.crt server.key \/etc\/openvpn<\/code><\/p>\n

Now we’re going to generate our client certificate, replacing the “client” with the username you choose:
\ncd \/etc\/openvpn\/easy-rsa
\n.\/build-key client<\/code><\/p>\n

When complete, we want to configure the routing parts of CentOS 7 for use with the VPN installation:
\nyum install iptables-services -y
\nsystemctl mask firewalld
\nsystemctl enable iptables
\nsystemctl stop firewalld
\nsystemctl start iptables
\niptables --flush<\/code><\/p>\n

We want to add some forwarding rules before enabling our VPN service:
\niptables -t nat -A POSTROUTING -s 10.8.0.0\/24 -o eth0 -j MASQUERADE
\niptables-save > \/etc\/sysconfig\/iptables
\nnano \/etc\/sysctl.conf<\/code>
\nnet.ipv4.ip_forward = 1<\/code><\/p>\n

Once you’ve completed your configuration and forwarding rules, it’s time to enable the OpenVPN service and start it up:
\nsystemctl -f enable openvpn@server.service
\nsystemctl start openvpn@server.service<\/code><\/p>\n

After starting and enable the service, we want to configure the client, copy the “ca” certificate, and copy the “client” key. Each of these copied files is necessary to use the VPN:
\n\/etc\/openvpn\/easy-rsa\/keys\/ca.crt
\n\/etc\/openvpn\/easy-rsa\/keys\/client.crt
\n\/etc\/openvpn\/easy-rsa\/keys\/client.key
\n<\/code><\/p>\n

To get started using the VPN, we need to create a .ovpn file configuration for use with OpenVPN:
\nnano client.ovpn<\/code>
\nclient
\ndev tun
\nproto udp
\nremote \"your_server_ip\" 1194
\nresolv-retry infinite
\nnobind
\npersist-key
\npersist-tun
\ncomp-lzo
\nverb 3
\nca ca.crt
\ncert client.crt
\nkey client.key<\/code><\/p>\n

Once you’ve created your .ovpn file it’s time to use the certificate:
\nWindows: Copy all file to C:Program FilesOpenVPNconfig
\nMacOS: Import .ovpn file with Tunnelblick
\nLinux: sudo openvpn --config client.ovpn <\/code><\/p>\n

Conclusion<\/h2>\n

Congratulations, you’ve installed OpenVPN on your cloud or dedicated server node running CentOS 7. If you found this guide on how to install OpenVPN helpful, please share it with other users going through the same process. Additionally, check out our other guides and learn more about other options available for your cloud server or dedicated server nodes. <\/p>\n","protected":false},"excerpt":{"rendered":"

How to Install OpenVPN on CentOS 7 OpenVPN\u00ae is open-source software that lets the user implement and create virtual private networks; these networks serve as a secure connection between two points, allowing traffic to move unobstructed while remaining private and secure. OpenVPN allows peers to use a pre-shared secret key, certificate, or username and password<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[74],"tags":[],"class_list":["post-4171","post","type-post","status-publish","format-standard","hentry","category-networking","operating_system-centos-7"],"yoast_head":"\nHow to Install OpenVPN on CentOS 7 - Globo.Tech<\/title>\n<meta name=\"description\" content=\"How to Install OpenVPN on CentOS 7? OpenVPN is open-source software that lets the user implement and create virtual private networks; these networks serve as a secure connection between two points, allowing traffic to move unobstructed while remaining private and secure. To...\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.globo.tech\/learning-center\/install-openvpn-centos-7\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Install OpenVPN on CentOS 7 - Globo.Tech\" \/>\n<meta property=\"og:description\" content=\"How to Install OpenVPN on CentOS 7? OpenVPN is open-source software that lets the user implement and create virtual private networks; these networks serve as a secure connection between two points, allowing traffic to move unobstructed while remaining private and secure. To...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.globo.tech\/learning-center\/install-openvpn-centos-7\/\" \/>\n<meta property=\"og:site_name\" content=\"Globo.Tech\" \/>\n<meta property=\"article:published_time\" content=\"2018-02-12T20:32:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.globo.tech\/learning-center\/wp-content\/uploads\/2018\/02\/openvpn_logo.png\" \/>\n<meta name=\"author\" content=\"GloboTech Communications\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"GloboTech Communications\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/install-openvpn-centos-7\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/install-openvpn-centos-7\\\/\"},\"author\":{\"name\":\"GloboTech Communications\",\"@id\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/#\\\/schema\\\/person\\\/e17784b37f4a4f49b7bc611847912e87\"},\"headline\":\"How to Install OpenVPN on CentOS 7\",\"datePublished\":\"2018-02-12T20:32:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/install-openvpn-centos-7\\\/\"},\"wordCount\":725,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/install-openvpn-centos-7\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/wp-content\\\/uploads\\\/2018\\\/02\\\/openvpn_logo.png\",\"articleSection\":[\"Networking\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/install-openvpn-centos-7\\\/\",\"url\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/install-openvpn-centos-7\\\/\",\"name\":\"How to Install OpenVPN on CentOS 7 - Globo.Tech\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/install-openvpn-centos-7\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/install-openvpn-centos-7\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/wp-content\\\/uploads\\\/2018\\\/02\\\/openvpn_logo.png\",\"datePublished\":\"2018-02-12T20:32:47+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/#\\\/schema\\\/person\\\/e17784b37f4a4f49b7bc611847912e87\"},\"description\":\"How to Install OpenVPN on CentOS 7? OpenVPN is open-source software that lets the user implement and create virtual private networks; these networks serve as a secure connection between two points, allowing traffic to move unobstructed while remaining private and secure. To...\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/install-openvpn-centos-7\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/install-openvpn-centos-7\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/install-openvpn-centos-7\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/wp-content\\\/uploads\\\/2018\\\/02\\\/openvpn_logo.png\",\"contentUrl\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/wp-content\\\/uploads\\\/2018\\\/02\\\/openvpn_logo.png\",\"width\":208,\"height\":54,\"caption\":\"openvpn_logo\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/install-openvpn-centos-7\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Install OpenVPN on CentOS 7\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/#website\",\"url\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/\",\"name\":\"Globo.Tech\",\"description\":\"Welcome to the Official Globo.Tech Learning Center\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.globo.tech\\\/learning-center\\\/#\\\/schema\\\/person\\\/e17784b37f4a4f49b7bc611847912e87\",\"name\":\"GloboTech Communications\",\"sameAs\":[\"http:\\\/\\\/www.gtcomm.net\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Install OpenVPN on CentOS 7 - Globo.Tech","description":"How to Install OpenVPN on CentOS 7? OpenVPN is open-source software that lets the user implement and create virtual private networks; these networks serve as a secure connection between two points, allowing traffic to move unobstructed while remaining private and secure. To...","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.globo.tech\/learning-center\/install-openvpn-centos-7\/","og_locale":"en_US","og_type":"article","og_title":"How to Install OpenVPN on CentOS 7 - Globo.Tech","og_description":"How to Install OpenVPN on CentOS 7? OpenVPN is open-source software that lets the user implement and create virtual private networks; these networks serve as a secure connection between two points, allowing traffic to move unobstructed while remaining private and secure. To...","og_url":"https:\/\/www.globo.tech\/learning-center\/install-openvpn-centos-7\/","og_site_name":"Globo.Tech","article_published_time":"2018-02-12T20:32:47+00:00","og_image":[{"url":"https:\/\/www.globo.tech\/learning-center\/wp-content\/uploads\/2018\/02\/openvpn_logo.png","type":"","width":"","height":""}],"author":"GloboTech Communications","twitter_misc":{"Written by":"GloboTech Communications","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.globo.tech\/learning-center\/install-openvpn-centos-7\/#article","isPartOf":{"@id":"https:\/\/www.globo.tech\/learning-center\/install-openvpn-centos-7\/"},"author":{"name":"GloboTech Communications","@id":"https:\/\/www.globo.tech\/learning-center\/#\/schema\/person\/e17784b37f4a4f49b7bc611847912e87"},"headline":"How to Install OpenVPN on CentOS 7","datePublished":"2018-02-12T20:32:47+00:00","mainEntityOfPage":{"@id":"https:\/\/www.globo.tech\/learning-center\/install-openvpn-centos-7\/"},"wordCount":725,"commentCount":0,"image":{"@id":"https:\/\/www.globo.tech\/learning-center\/install-openvpn-centos-7\/#primaryimage"},"thumbnailUrl":"https:\/\/www.globo.tech\/learning-center\/wp-content\/uploads\/2018\/02\/openvpn_logo.png","articleSection":["Networking"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.globo.tech\/learning-center\/install-openvpn-centos-7\/","url":"https:\/\/www.globo.tech\/learning-center\/install-openvpn-centos-7\/","name":"How to Install OpenVPN on CentOS 7 - Globo.Tech","isPartOf":{"@id":"https:\/\/www.globo.tech\/learning-center\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.globo.tech\/learning-center\/install-openvpn-centos-7\/#primaryimage"},"image":{"@id":"https:\/\/www.globo.tech\/learning-center\/install-openvpn-centos-7\/#primaryimage"},"thumbnailUrl":"https:\/\/www.globo.tech\/learning-center\/wp-content\/uploads\/2018\/02\/openvpn_logo.png","datePublished":"2018-02-12T20:32:47+00:00","author":{"@id":"https:\/\/www.globo.tech\/learning-center\/#\/schema\/person\/e17784b37f4a4f49b7bc611847912e87"},"description":"How to Install OpenVPN on CentOS 7? OpenVPN is open-source software that lets the user implement and create virtual private networks; these networks serve as a secure connection between two points, allowing traffic to move unobstructed while remaining private and secure. To...","breadcrumb":{"@id":"https:\/\/www.globo.tech\/learning-center\/install-openvpn-centos-7\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.globo.tech\/learning-center\/install-openvpn-centos-7\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.globo.tech\/learning-center\/install-openvpn-centos-7\/#primaryimage","url":"https:\/\/www.globo.tech\/learning-center\/wp-content\/uploads\/2018\/02\/openvpn_logo.png","contentUrl":"https:\/\/www.globo.tech\/learning-center\/wp-content\/uploads\/2018\/02\/openvpn_logo.png","width":208,"height":54,"caption":"openvpn_logo"},{"@type":"BreadcrumbList","@id":"https:\/\/www.globo.tech\/learning-center\/install-openvpn-centos-7\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.globo.tech\/learning-center\/"},{"@type":"ListItem","position":2,"name":"How to Install OpenVPN on CentOS 7"}]},{"@type":"WebSite","@id":"https:\/\/www.globo.tech\/learning-center\/#website","url":"https:\/\/www.globo.tech\/learning-center\/","name":"Globo.Tech","description":"Welcome to the Official Globo.Tech Learning Center","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.globo.tech\/learning-center\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.globo.tech\/learning-center\/#\/schema\/person\/e17784b37f4a4f49b7bc611847912e87","name":"GloboTech Communications","sameAs":["http:\/\/www.gtcomm.net"]}]}},"_links":{"self":[{"href":"https:\/\/www.globo.tech\/learning-center\/wp-json\/wp\/v2\/posts\/4171","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.globo.tech\/learning-center\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.globo.tech\/learning-center\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.globo.tech\/learning-center\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.globo.tech\/learning-center\/wp-json\/wp\/v2\/comments?post=4171"}],"version-history":[{"count":5,"href":"https:\/\/www.globo.tech\/learning-center\/wp-json\/wp\/v2\/posts\/4171\/revisions"}],"predecessor-version":[{"id":4177,"href":"https:\/\/www.globo.tech\/learning-center\/wp-json\/wp\/v2\/posts\/4171\/revisions\/4177"}],"wp:attachment":[{"href":"https:\/\/www.globo.tech\/learning-center\/wp-json\/wp\/v2\/media?parent=4171"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.globo.tech\/learning-center\/wp-json\/wp\/v2\/categories?post=4171"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.globo.tech\/learning-center\/wp-json\/wp\/v2\/tags?post=4171"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}