These files are example configuration files for a server <-> client openvpn bridge.
This can be used to connect a Hybrid Wirelessleiden node to the WirelessLeiden network
trough a openvpn tunnel using the internet.

In this example are HybridEd and HybridRick2 connected to each other.
On both sides a seperated OpenVPN box is placed, installed with a clean FreeBSD 10.0.

Example drawing:

(HybridRick2 <---> (vpn.wleiden.net) <------INTERNET-----> (vpn-ed.wleiden.net) <---> (HybridEd)


Update FreeBSD with the last updates and security pathces:

root@vpn_ed:~ # freebsd-update fetch
root@vpn_ed:~ # freebsd-update install
root@vpn_ed:~ # reboot

Installing OpenVPN:

root@vpn_ed:~ # pkg install openvpn
root@vpn_ed:~ # mkdir -p /usr/local/etc/openvpn/keys
root@vpn_ed:~ # mkdir -p /usr/local/etc/openvpn/easy-rsa
root@vpn_ed:~ # cp -R /usr/local/share/easy-rsa/ /usr/local/etc/openvpn/easy-rsa

Generating Encryption Certificates:

root@vpn_ed:~ # cd /usr/local/etc/openvpn/easy-rsa
root@vpn_ed:~ # chmod +x *
root@vpn_ed:~ # sh
root@vpn_ed:~ # . ./vars
root@vpn_ed:~ # sh ./clean-all

Generate ca.key:
root@vpn_ed:~ # sh ./build-ca 

Fill in some fields but you can leave some blank..


Generate server.key:
root@vpn_ed:~ # sh ./build-key-server server

Fill in some fields but you can leave some blank..


Generate "client1.key" for Client1: 
root@vpn_ed:~ # sh ./build-key client1

Fill in some fields but you can leave some blank..
NOTE: If you want to create more clients, just repeat this step and make sure you enter a different "CommonName".


Generate DH parameters 1024 bit:
root@vpn_ed:~ # sh ./build-dh


Copy all files in key directory to /usr/local/etc/openvpn/keys:
root@vpn_ed:~ # cp -R keys/* /usr/local/etc/openvpn/keys




References:
http://blog.up-link.ro/how-to-install-openvpn-in-freebsd/
http://www.cnblogs.com/wwufengg/articles/openvpn-config-freebsd.html