[SOLVED] How install OpenVPN Client Export

[lem]

I don't appear to be able to install any packages - There is no menu to do so.
I would like to install the OpenVPn Client Export package.

[franco]

We do not have package support. We are rewriting this part using modern coding practices because the legacy system is unmaintainable. Client exporter package is a priority item, but we have no ETA here.

[lem]

Could you point me in right direction for configuring the client manually? I've created the required certificates.

[franco]

I can point you to the raw package code that pfSense has:

https://github.com/pfsense/pfsense-packages/tree/master/config/openvpn-client-export

Unfortunately, nobody has picked up the integration work for OPNsense yet. Right now the developers are working more on the plumbing and preparation for packages so we can't jump ahead here, but would appreciate any help.

[lem]

Sorry, but I just want to use OpenVPN with the firewall I've bought.

[franco]

I understand.

[igorek24]

I have successfully installed it on my firewall, the only thing is that the style is little bit off but I don't care, it saves me a lot of time. I don't remember exactly how I did it, but I will look it up tomorrow at work and post back.

[franco]

Nice work! If you let us know how you did it we may be able to preserve that functionality, although I was about to rip out the old package system so to clean up the code further. :)

[ristridin]

I have successfully installed in on my firewall, the only thing is that the style is little bit off but I don't care, I saves me a lot of time. I don't remember exactly how I did it, but I will look it up tomorrow at work and post back.

yeah, can you plz explain how you did this? Would be great! :)

[igorek24]

OK, here is what I did, login in to the OPNSense via ssh (You can use PuTTy) and run this commands.

Code Select Expand

cd /usr/local/pkg/

Code Select Expand

fetch https://packages.pfsense.org/packages/config/openvpn-client-export/openvpn-client-export.inc

Code Select Expand

fetch https://files.pfsense.org/packages/openvpn-client-export/openvpn-client-export-2.3.6.tgz

Code Select Expand

chmod 077 openvpn*

Code Select Expand

cd /usr/local/www/

Code Select Expand

fetch https://packages.pfsense.org/packages/config/openvpn-client-export/vpn_openvpn_export.php

Code Select Expand

fetch https://packages.pfsense.org/packages/config/openvpn-client-export/vpn_openvpn_export_shared.php

Code Select Expand

chmod 077 vpn_openvpn*

Code Select Expand

mkdir /etc/inc

Code Select Expand

mkdir /etc/inc/priv

Code Select Expand

cd /etc/inc/priv

Code Select Expand

fetch https://packages.pfsense.org/packages/config/openvpn-client-export/openvpnexport.inc

Code Select Expand

chmod 077 openvpnexport.inc

After this is done, you can access it by adding /vpn_openvpn_export.php in to the OS URL( for exemle https://192.168.1.1/vpn_openvpn_export.php)


I hope this will help someone else until developers implement it in to the OPNsense core or as an addon.

Source: http://www.pfsense.com/packages/config/openvpn-client-export/openvpn-client-export.xml

[frijj2k]

Many thanks for sharing this!  I have been bashing my head for nearly a day trying to get this working... Thanks!  :D

[franco]

Perfect, thanks, that's something to work with. I'll ponder a bit about how I can wrap this up as an easy to install test package.

Small improvement: if you need /etc/inc make it a soft-link to /usr/local/etc/inc where the include files reside now.

# ln -s /usr/local/etc/inc /etc/inc

[frijj2k]

I have made the symlink... Thanks again.

[igorek24]

Perfect, thanks, that's something to work with. I'll ponder a bit about how I can wrap this up as an easy to install test package.

Small improvement: if you need /etc/inc make it a soft-link to /usr/local/etc/inc where the include files reside now.

# ln -s /usr/local/etc/inc /etc/inc

Thanks, franco, I don't know why I didn't think about symlink to begin with, I guess I gust want it to work quickly LOL. Anyway, I'm not sure if this is a latest version or not.

[AdSchellevis]

I've cleaned up a lot of the package code the last days, to avoid issues with the export tool I decided to implement this into the next version.
commit https://github.com/opnsense/core/commit/c7d388a8020597e6419565d23b65dc1573ec243e includes the necessary files and changes to the system.

Thanks for publishing the needed files, this saved a lot of time.