StreisandEffect / streisand

Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.
https://twitter.com/streisandvpn
Other
23.16k stars 2k forks source link

OpenWrt Openconnect Client setup #1649

Open zee-shany opened 4 years ago

zee-shany commented 4 years ago

Hi,

Is there or will there be an easy to follow for newbie guide for Openwrt/Openconnect? I find #280 but it seems instruction isn't fully clear.. I'd highly appreciate if someone who may have setup openconnect on their openwrt router, list down the steps. following #280 i was able to convert *.P12 file to .PEM file and apply the parameters but the interface didn't seem to connect.

Thanks in advance.

Expected behavior:

Actual Behavior:

Steps to Reproduce:

[ contents of streisand-diagnostics.md here ]

Additional Details:

Log output from Ansible or other relevant services (link to Gist for longer output):

Target Cloud Provider:
Operating System of target host:
Operating System of client:
Version of Ansible, using ansible --version :
Output from git rev-parse HEAD in your Streisand directory :
jacob210 commented 4 years ago

I have solved it. See my blog https://www.jianshu.com/p/bcbd16a0cdc9

zee-shany commented 4 years ago

I have solved it. See my blog https://www.jianshu.com/p/bcbd16a0cdc9

hello, Thanks for your guide link.

I'm using a striesand server on AWS ec2 instance, which has openconnect server installed.

i've tried to follow your steps but i don't see any traffic passing from OC-VPN interface.

I'm using streisand user and password

when i run below command it gives -ash:openssl: not found. But i installed opkg install openvpn-openssl already.

root@OpenWrt:~# openssl s_client -connect 157.x.x.x:x -showcer
ts 2>/dev/null </dev/null | awk '/-----BEGIN/,/-----END/ { print $0 }'
 | openssl x509 -noout -fingerprint -sha1 | sed 's/Fingerprint=//' | s
ed 's/://g'
-ash: openssl: not found

Please can you help me point what step i'm doing wrong?

Thanks in advance and appreciate your support.