Skip to content

Create a Devops VPN identity / certificate

Devops VPN is in GCP project attracs-devops

Instructions (by Samsa) 1. Open the GCP project web page attracs-devops 2. Make sure that both of these VM's are running in GCP: 1. devops-vpn and 2. devops-ca 3. If they are not, start them. 4. Open up terminal and authenticate yourself to GCP: 1. gcloud auth application-default login 5. SSH to devops-vpn and change your user to the "ovpn" user. 1. gcloud compute ssh devops-vpn --project attracs-devops --zone europe-north1-a --tunnel-through-iap 6. go to easy-rsa directory and run command ./easyrsa gen-req firstname_lastaname_adi nopass 7. cp pki/private/firstname_lastaname_adi.key ~/client-configs/keys/ 8. rsync -v pki/reqs/firstname_lastaname_adi.req ca@ca:~ 9. Log in to ca server ssh ca@192.168.1.3/ -i .ssh/ovpn_id_ed25519 10. generate .crt files there (see history) 1. Todo: Write this out 11. back to devops-vpn machine and in client-config folder run command ./make_config.sh firstname_lastaname_adi 12. copy .ovpn file to local machine and import it to vpn client

Followed this guide to create the VPN identitites: https://www.digitalocean.com/community/tutorials/how-to-set-up-and-configure-an-openvpn-server-on-ubuntu-20-04 Here's some extra details regarding the instances attached: devops-openvpn & devops-ca machine details (https://app.clickup.com/2496230/docs/2c5q6-69975/2c5q6-207681) You can look at the command history to get a little bit more help For now, here's this image to at least give you a little something: