Script para construção de VPN-SSL

Descrição

Esconder código-fonte

#!/bin/bash
# Made by kl0nez and reviewed by d4rkness
# any comments or doubts
# Visit http://www.e-secure.com.br/linux
# Visit http://drkmario.blogspot.com

mkdir ~/.vpn.o.matic
cd ~/.vpn.o.matic
echo "Entre com a porta que a VPN irá utilizar "
read PORT
echo "Entre o endereco IP do servidor"
read SERVERIP
echo "Entre com o endereço IP da estação cliente"
read CLIENTIP
echo "Entre com ip da VPN na ponta servidor"
read IPVPNA
echo "Entre com ip da VPN na ponta cliente"
read IPVPNB

echo "Criando Script para ser usado no servidor..."
echo ""

cat > vpn_server << .EOF.
#!/bin/bash
#Script para ser usado no servidor
/usr/sbin/stunnel -d $PORT -v 3 -D 7 -a /var/lib/ssl/certs/trusted -p /var/lib/ssl/certs/pontaA.pem -L /usr/sbin/pppd -- pppd local file /etc/ppp/options.vpnA
.EOF.

openssl req -new -x509 -days 365 -nodes -out pontaA.pem -keyout pontaA.pem
CERTA=`openssl x509 -hash -noout -in pontaA.pem`
openssl req -new -x509 -days 365 -nodes -out pontaB.pem -keyout pontaB.pem
CERTB=`openssl x509 -hash -noout -in pontaB.pem` echo > options.vpnA

scp pontaB.pem root@$SERVERIP:/var/lib/ssl/certs/trusted/$CERTB.0
scp pontaA.pem root@$SERVERIP:/var/lib/ssl/certs/pontaA.pem
scp options.vpnA root@$SERVERIP:/etc/ppp
scp vpn_server root@$SERVERIP:/usr/local/bin

ssh root@$CLIENTIP "chmod 755 /usr/local/bin/vpn_server ; chmod 600 /var/lib/ssl/certs/trusted/$CERTB.0 ; chmod 600 /var/lib/ssl/certs/pontaA.pem"

echo "Criando scripts para serem usados no cliente..."
echo ""

cat > vpn_client << .EOF.
#!/bin/bash
#Script para ser usado do lado do Cliente
/usr/sbin/stunnel -p /var/lib/ssl/certs/pontaB.pem -c -r $SERVERIP:$PORT -D 7 -L /usr/sbin/pppd -- pppd local file /etc/ppp/options.vpnB & .EOF. echo "$IPVPNA:$IPVPNB" > options.vpnB

scp pontaA.pem root@$CLIENTIP:/var/lib/ssl/certs/trusted/$CERTA.0
scp pontaB.pem root@$CLIENTIP:/var/lib/ssl/certs/pontaB.pem
scp options.vpnB root@$CLIENTIP:/etc/ppp
scp vpn_client root@$CLIENTIP:/usr/local/bin

ssh root@$CLIENTIP "chmod 755 /usr/local/bin/vpn_client ; chmod 600 /var/lib/ssl/certs/trusted/$CERTA.0 ; chmod 600 /var/lib/ssl/certs/pontaB.pem"