yum update #全部升一下级
yum install openssl openssl-devel #openssl也许系统已经装了

cd /etc/yum.repos.d/
vi CentOS-Third.repo
	[dag]
	name=Dag RPM Repository for Red Hat Enterprise Linux
	baseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag
	gpgcheck=1
	enabled=1
	[kbs-CentOS-Extras]
	name=CentOS.Karan.Org-EL$releasever - Stable
	gpgcheck=1
	gpgkey=http://centos.karan.org/RPM-GPG-KEY-karan.org.txt
	enabled=1
	baseurl=http://centos.karan.org/el$releasever/extras/stable/$basearch/RPMS/
	[kbs-CentOS-Misc]
	name=CentOS.Karan.Org-EL$releasever - Stable
	gpgkey=http://centos.karan.org/RPM-GPG-KEY-karan.org.txt
	gpgcheck=1
	enabled=1
	baseurl=http://centos.karan.org/el$releasever/misc/stable/$basearch/RPMS/
	[kbs-CentOS-Misc-Testing]
	name=CentOS.Karan.Org-EL$releasever - Testing
	gpgkey=http://centos.karan.org/RPM-GPG-KEY-karan.org.txt
	gpgcheck=1
	enabled=1
	baseurl=http://centos.karan.org/el$releasever/misc/testing/i386/RPMS/
 
rpm --import http://centos.karan.org/RPM-GPG-KEY-karan.org.txt
rpm --import http://dag.wieers.com/rpm/packages/RPM-GPG-KEY.dag.txt

yum install openvpn -y #安装openvpn
 
#找下easy-rsa在哪,将其cp到/etc/openvpn目录下
updatedb
locate easy-rsa
cp -R /../easy-rsa /etc/openvpn/
 
cd /etc/openvpn/easy-rsa
chmod 777 *
mkdir /etc/openvpn/keys
 
vi ./vars
#将export KEY_DIR=/etc/openvpn/keys改为export KEY_DIR=/etc/openvpn/keys
 
source ./vars
 
./clean-all
./build-ca
./build-key-server server
./build-key client1
./build-dh
 
cd /etc/openvpn
vi server.conf
	mode server
	duplicate-cn #多个用户使用同一帐号
	port 1194
	proto udp
	dev tun
	ca keys/ca.crt
	cert keys/server.crt
	key keys/server.key
	dh keys/dh1024.pem
	server 192.168.2.0 255.255.255.0
	client-config-dir ccd
	# Put your Public DNS Servers here
	push "dhcp-option DNS 208.67.222.222"
	push "route 192.168.2.0 255.255.255.0"
	ifconfig-pool-persist ipp.txt
	push "redirect-gateway"
	keepalive 10 120
	comp-lzo
	persist-key
	persist-tun
	status server-tcp.log
	verb 3
 
touch server-tcp.log
touch ipp.txt
vi /etc/init.d/openvpn 去掉119行 echo 1 > /proc/sys/net/ipv4/ip_forward 前的注释符
 
iptables -t nat -A POSTROUTING -s 192.168.2.0/24 -j SNAT --to 123.123.123.123
 
/etc/init.d/openvpn start

#my vps
cd /etc/openvpn/keys
tar zcvf clent1key.tar.gz c*
sz clientkey.tar.gz #将其sz下载下来并解压放到C:\Program Files\OpenVPN\config\
 
#windows client
C:\Program Files\OpenVPN\config\client1.ovpn
	client
	dev tun
	proto udp
	remote 174.36.56.242 1194
	resolv-retry infinite
	nobind
	persist-key
	persist-tun
	ca ca.crt
	cert client1.crt
	key client1.key
	ns-cert-type server
	#DNS Options here, CHANGE THESE !!
	push "dhcp-option DNS 208.67.222.222"
	comp-lzo
	verb 3
	status openvpn-status.log