Jump to content
XPEnology Community

подключение amnezia vpn на synology


Recommended Posts

Приветствую!

Кто-нибудь подключался через amnezia vpn (DSM 6.2)?

Пробую скормит конфиг .ovpn  через Настройки-Сеть-Сетевой интерфейс - Создать openvpn -подгружаю конфиг .ovpn созданный через amnezia vpn - далее и болт...файл .ovpn содержит неверные параметры

При этом через стандартную прогу openvpn на телефоне отлично работает.

Link to comment
Share on other sites

  • 2 weeks later...

есть такой конфиг .ovpn с которым справляется стандартный win openVPN (местами заменил частную инфу на ххххх):

Цитата

client
dev tun
proto udp
resolv-retry infinite
nobind
persist-key
persist-tun

cipher AES-256-GCM
auth SHA512
verb 3
tls-client
tls-version-min 1.2
key-direction 1
remote-cert-tls server
redirect-gateway def1 bypass-dhcp

dhcp-option DNS 1.1.1.1
dhcp-option DNS 1.0.0.1
block-outside-dns

remote xx.xx.xx.xx 1194

<ca>
-----BEGIN CERTIFICATE-----
xxxxx
-----END CERTIFICATE-----

</ca>
<cert>
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            xxxxx
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ChangeMe
        Validity
            Not Before: Mar  5 16:21:16 2023 GMT
            Not After : Jun  7 16:21:16 2025 GMT
        Subject: CN=sQFW30imXc6KlfZZKhyVL7CuV7WtfMPH
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fb:1a:85:5b:18:bb:01:69:0a:c3:c8:a1:6e:
                    1a:06:d5:93:bc:89:f6:18:67:76:24:5e:59:e7:66:
                    b5:9c:8e:3c:a4:e6:e7:a3:0d:8c:a7:75:ab:50:e4:
                    80:aa:79:32:ba:94:e0:9e:9a:9b:9a:fc:0d:7b:42:
                    9d:31:ad:7f:2e:8a:22:36:73:de:00:fb:37:94:d3:
                    f3:56:a1:a8:db:5e:52:74:8a:6b:9b:c7:74:ef:a7:
                    91:35:2d:44:ef:a6:2a:8f:48:a5:39:e4:56:58:11:
                    c6:f1:59:ba:4f:fb:69:94:00:38:92:39:05:c3:85:
                    2b:ff:a0:ac:6f:b5:7a:9a:39:85:36:3b:ba:a7:0d:
                    41:17:26:c7:6b:44:11:80:3d:77:c4:80:90:a4:96:
                    88:c8:c5:a8:05:f2:7c:9f:3f:12:92:f6:0d:ce:8d:
                    18:83:eb:61:42:29:13:f0:e4:fb:ff:c1:ea:fe:96:
                    7e:02:2a:d2:cc:17:44:63:db:58:40:89:13:c5:c5:
                    c5:ba:ee:6a:bc:7d:7e:06:1a:84:3b:ae:98:fe:1a:
                    e6:f8:24:62:b8:a3:89:10:30:aa:8e:a9:c5:45:f9:
                    6c:d4:89:38:a2:0f:29:b8:85:df:07:c0:d5:74:c6:
                    98:e3:39:12:07:ee:ab:85:d1:b0:4a:eb:ec:c6:2a:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints:
                CA:FALSE
            X509v3 Subject Key Identifier:
                81:21:22:DF:10:D6:AB:93:2B:B2:32:8B:7E:DC:D7:18:6A:BC:26:CC
            X509v3 Authority Key Identifier:
                keyid:29:76:33:43:D1:F1:1F:CA:88:92:6A:A3:77:B2:33:01:47:42:EB:C5
                DirName:/CN=ChangeMe
                serial:30:DF:F0:28:4D:9F:0E:49:39:E2:EA:E6:43:C7:58:02:80:EC:1C:EC

            X509v3 Extended Key Usage:
                TLS Web Client Authentication
            X509v3 Key Usage:
                Digital Signature
    Signature Algorithm: sha256WithRSAEncryption
        
-----BEGIN CERTIFICATE-----
xxxxx
-----END CERTIFICATE-----

</cert>
<key>
-----BEGIN PRIVATE KEY-----
xxxxx
-----END PRIVATE KEY-----

</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
xxxxx
-----END OpenVPN Static key V1-----

</tls-auth>

 

для synology путем подбора сделал укороченную версию:

Цитата

dev tun
tls-client
remote хх.хх.хх.хх 1194


redirect-gateway def1 bypass-dhcp
dhcp-option DNS 1.1.1.1
dhcp-option DNS 1.0.0.1

proto udp
script-security 2
comp-lzo
reneg-sec 0
cipher AES-256-GCM
auth SHA512
auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----
ххххх
-----END CERTIFICATE-----
</ca>

 

 

DSM съел конфиг без ошибок, но пока не подключается, может сертификатов не хватает каких-нибудь, есть у кого VPN опыт подскажите, что можно попробовать?

 

684920179_.thumb.png.1efdd151bf79e1c660003fe4c495caa5.png

 

 

1136270182_.thumb.png.882fc809a961ac18e063aa6b1d580f93.png

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...