crans_bcfg2/etc/python/template/openvpn.py
Olivier Huber 69076827f9 [./etc/python/template/openvpn.py] openvpn verifie maintenant correctement le cn
darcs-hash:20100628223126-8fbb1-7c9d0cb8acc80f954a1a5cf0b727bd1d4a2885df.gz
2010-06-29 00:31:26 +02:00

35 lines
747 B
Python

# -*- coding: utf-8; mode: python -*-
include("ip")
header("Configuration du tunnel entre %s et %s" % (hostname, remote))
print """
daemon tun-%(remote_name)s
dev tun-%(remote_name)s
tls-client
ca /etc/ssl/certs/root.pem
cert /etc/ssl/certs/vpn.pem
tls-verify "/usr/share/openvpn/verify-cn %(remote_name).vpn.crans.org"
key /etc/ssl/private/vpn.pem
log-append /var/log/openvpn/%(remote_name)s.log
port 1194
ifconfig %(local_vpn_ip)s %(remote_vpn_ip)s
route 10.231.136.0 255.255.255.0 vpn_gateway
ping 15
ping-exit 45
verb 3
dh /etc/openvpn/dh1024.pem
remote %(remote_pub_ip)s
""" % { "remote_name": remote,
"local_vpn_ip": admipof("ovh"),
"remote_vpn_ip": admipof(remote_vpn),
"remote_pub_ip": pubipof(remote) }