What's changed: Initial version (topic 2.12, subtopics 2.12.1–2.12.4)
6.3Configuring and Managing OpenVPN
Learn the fundamentals of VPN (Virtual Private Network) and the open-source implementation OpenVPN: the configuration directory /etc/openvpn/, the openvpn command used by both server and client, and the difference between the two common topologies, point-to-point and site-to-site.
A VPN lets branch offices or remote workers securely reach an internal network, creating an encrypted virtual private line over the public internet. OpenVPN is an open-source VPN implementation using SSL/TLS-based encryption—a common, approachable choice to set up on a Linux server.
6.3.1OpenVPN configuration files and the command
- Configuration files, certificates, and keys live under /etc/openvpn/ (server and client configs are typically managed as separate .conf files).
- The openvpn command uses the same binary on both server and client; the configuration file content (e.g., presence of a
serverdirective) determines the role. - Encryption relies on SSL/TLS-based certificate authentication (CA certificate, server certificate, client certificate) or a pre-shared key; certificate-based setups scale better and are the practical mainstream.
Continue reading — free sign-up
You're reading the free preview. Sign up free to read this section in full, plus every chapter (including 4+) and all questions.