Diogo-Paulico / FCT-VPN

Allows for FCT's Checkpoint VPN to be used on Linux
23 stars 5 forks source link

VPN FCT - Linux

This guide intends to allow the use of FCT's VPN on Linux. Any issues, post them in the issues tab
THANKS: to Miguel, Duda, João and Tiago for early testing of the install and VMs;to João Arvana for making the install process easier, and optimizing this guide;

💥💥Warning💥💥

Some students report this method has not worked for them. If this is your case, we advise you to try out this repository instead. Follow the instructions on that repository, using vpn.fct.unl.pt as your VPN endpoint.
The downside of that method is about 700MB of disk usage, the upside is that the VPN does not contaminate your actual system, and is contained to a chroot. Thanks to ruyrybeyro for the script!

Index

  1. Compatibility
  2. VMs
  3. Auto Installation (For Ubuntu/Arch based distros)
  4. Manual Installation
  5. Normal Access
  6. Uninstallation
  7. Known issues

Compatibility

VMs

These VMs contain the VPN already installed, you need Virtual Box to use these, the website is bookmarked on firefox

Auto Installation (For Ubuntu or Arch based distros)

Massive thanks to João Arvana for greatly improving this installer and guide.
Open a terminal window and run the following command:

Manual Installation

To install the vpn we are going to be using the terminal, so keep one open at all times during this install. When told to run a command or type into the terminal, type and execute the given command. The terminal can be accessed through the applications menu.

Java

You need to have Oracle JRE or Oracle OpenJDK installed, to check if it is run the following command:

  java -version

if your output looks anything like this:

  openjdk version "1.8.0_242"
  OpenJDK Runtime Environment (build 1.8.0_242-8u242-b08-0ubuntu3~19.10-b08)
  OpenJDK 64-Bit Server VM (build 25.242-b08, mixed mode)

Java is installed.

If it looks like this:

    The program ‘java’ can be found in the following packages:
    * default-jre
    * gcj-4.6-jre-headless
    * openjdk-6-jre-headless
    * gcj-4.5-jre-headless
    * openjdk-7-jre-headless
    Try: sudo apt-get install

Type in the terminal:

  sudo apt install default-jre

Check if it was correctly installed by typing again:

  java -version

The output should now look like the one presented previously.

Firefox

For some reason you need to have Firefox installed during the VPNs installation even if the browser you intend to use to browse the web is Chrome/Chromium. Firefox is only required during installation, meaning you can uninstall it right after we are done. To check if it is installed you can either look for it in the applications menu or type in terminal:

  firefox

if you don't, type:

  sudo apt install firefox

Libraries required by the VPN

To install them type in the terminal:

  sudo apt install libpam0g:i386 libx11-6:i386 libstdc++6:i386 libstdc++5:i386 libnss3-tools xterm openssl

SSL network extender

To install it you can run the following command:

 wget -q -O snx_install.sh https://vpn.fct.unl.pt/sslvpn/SNX/INSTALL/snx_install.sh --no-check-certificate && chmod +x ./snx_install.sh && sudo ./snx_install.sh

or

Download it from the vpn's website: https://vpn.fct.unl.pt/sslvpn/SNX/INSTALL/snx_install.sh
Save it in an easy to reach location (ie. Desktop, Documents, Downloads)
Open a terminal window and type:

  cd ~/(location where it was saved (ie. Documents, Downloads, Desktop)) && sudo bash ./snx_install.sh

cshell

Firefox needs to be opened at least once after being installed before we can install cshell, so if you have never opened Firefox after installing it please do now and close it right after.

To install it you can run the following command:

wget -q -O cshell_install.sh https://vpn.fct.unl.pt/sslvpn/SNX/INSTALL/cshell_install.sh --no-check-certificate && chmod +x ./cshell_install.sh && sudo ./cshell_install.sh

or

Download it from the vpn's website: https://vpn.fct.unl.pt/sslvpn/SNX/INSTALL/cshell_install.sh
Save it in an easy to reach location (ie. Desktop, Documents, Downloads)
Open a terminal window and type:

  cd ~/(location where it was saved (ie. Documents, Downloads, Desktop)) && sudo bash ./cshell_install.sh

If you don't intend to use Firefox as your browser you can now uninstall it!

Accepting the SSL certificates

For you to be able to use the VPN you are going to have to accept two SSL certificates, one for localhost (your machine), and another one for the VPN server. Do this on the browser you intend to use to connect to the VPN, normally this would be the browser you use normally.

  1. SSL on Firefox
  2. SSL on Chrome or Chromium

SSL on Firefox

SSL on Chrome or Chromium

Connecting for the first time

GOOD JOB YOU'RE NOW CONNECTED

You can now attempt to access Mooshak:

Normal Access