A script that allows you to install and configure OpenConnect and LetsEncrypt on your Ubuntu server in the simplest way.
- Ubuntu 18.04 - 20.04 - 22.04
- Debian 10 11
- A domain is required to obtain the Certificate (If you want to buy a cheap domain, you can buy one from NameCheap. Namecheap also supports cryptocurrency payment method + free whois privacy protection
- Server Root Access
- *Important : LetsEncrypt needs port 80 to obtain the certificate. The script automatically detects Apache and Nginx if they are installed and will perform the installation based on that. If you have another process on port 80 besides Apache and Nginx, stop it before starting the installation so that port 80 is open during the process. After installation, you can reactivate your stopped service.
You need to answer a few simple questions, Then you won't have to do anything except wait a few moments and script will do :
- First, it installs OCSERV & LetsEncrypt automatically
- Then it obtains a certificate with the Stand-Alone plugin or with the Webroot plugin for Apache or Nginx automaticlly.
- Then it configures the OCSERV automatically
- Then it configures the Firewall automatically
- Then... that's it!
After finishing the installation and configuration, now you have access to a Menu by running the script again.
In the Users Menu, you can add a new user, delete an existing user, change username or password for each user, see the list of all users, see connected users, disconnect a connected user, add a separate configuration for each user.
In the OCSERV Menu, you can check the current status of each OCSERV services that you have created, restart or stop each OCSERV services that you have. view OCSERV log and change the current port.
In the LetsEncrypt Menu, You can add a new certificate, delete a certificate, change the certificate for your desired OCServ(s), Renew your certificates and see the current certificates that you already have.
In the Add Multiple OCServ Menu, You can add multiple OCSERVs! Each of them can have a new domain and a new port. A separate service and configuration will be created for each one. Then, you can use OCSERV Menu to view the status or restart, remove, reconfig each one.
Download and execute the script
wget https://raw.githubusercontent.com/dj2amir/installer/main/Ocserv-Installer.sh
chmod +x Ocserv-Installer.sh
./Ocserv-Installer.sh
Now answer a few simple questions and wait for the installation and configuration to finish.
that's it!
Now, if you run the script again, you will be redirected to the menu. At the top of the menu, you can see server specifications, OCServ version and service status. The menu contains most of the options you will need to manage your OCServ.
Please note, if you are using Ubuntu 22.04 and you are unable to connect the client to the server after completing the installation, check the server status and if you see The ""futex facility returned an unexpected error"", select the FIX OCServ Futex Error (Ubuntu 22.04) option from the OCServ menu and Wait for the operation to complete. Then connect the client again
Since ocserv is blocked in some countries (such as Iran), if you live in these countries and want to use ocserv, you can ssh tunnel to your main server through a local server.
for example :
You have a local server (a VPS inside your country) called server A and your destination server where ocserv is installed is called server B. First, make sure OCServ is active on server B without errors.
Run the following command on server A:
ssh -p {SERVER B SSH PORT} -f -N -L 0.0.0.0:{ANY PORT YOU WANT}:{SERVER B IP}:{SERVER B OCSERV PORT} root@{SERVER B IP}
example :
ssh -p 22 -f -N -L 0.0.0.0:2222:2.2.2.2:2222 root@2.2.2.2
-If the firewall is active on your server, you should open the port you are using.
Now connect the client to your local server (such as mobile, computer, etc.). as below:
yourlocalserverIP:PORT
of course you will see the ""untrusted server"" message popup when connecting, and the reason is that you are not connecting directly to the main server where your domain and certificate are located.
- OpenConnect for Windows: https://github.com/openconnect/openconnect-gui/releases/download/v1.5.3/openconnect-gui-1.5.3-win32.exe
- Anyconnect for Android: https://play.google.com/store/apps/details?id=com.cisco.anyconnect.vpn.android.avf&hl=en&gl=US
- Anyconnect for IOS devices: https://apps.apple.com/us/app/cisco-secure-client/id1135064690
If you are happy with my script, you can make me happy too with a small amount of donation!
Tether(USDT) TRC20 : TUk98fmgt7GH6FSvhouddgavfrHGPK6xFH Tether(USDT) ERC20 : 0x773edfc6d281849b51821d60b307b2cc55995816 BitcoinCash : 1NbBakoVWAFmQRKxJjrUTjYcCW22NBkNdZ LiteCoin : LfaptBxt4xcZpCk7J6JhX8KuhSEDhime61 DogeCoin : DTiEiGUjDsbDjenX44UEh2a7VWvcc1c9LK Bede Dar Rahe Khoda :) Cheers!