Kali/OpenVPN/PIA - Revision history

Unknown user: /* Troubleshooting */

2022-03-03T03:00:43Z

Troubleshooting

@@ Line 93: / Line 93: @@
 </pre>
-If this command works, you can reach the internet, but DNS is broken.
+If this command works, it means you can reach the internet, but DNS is broken. You can also use the dig command,
 ===Interference with other network interfaces===

Unknown user: /* Troubleshooting */

2022-03-03T01:39:31Z

Troubleshooting

← Older revision		Revision as of 01:39, 3 March 2022
Line 84:		Line 84:

	Use tcpdump to monitor packets traveling through interfaces.		Use tcpdump to monitor packets traveling through interfaces.

			===DNS Broken===

			If you can't connect to the internet using domain names like icanhazip.com, check if you can use an IP address.

			<pre>
			ping 8.8.8.8
			</pre>

			If this command works, you can reach the internet, but DNS is broken.

	===Interference with other network interfaces===		===Interference with other network interfaces===

Unknown user: /* Test Configuration */

2022-03-03T01:36:49Z

Test Configuration

← Older revision		Revision as of 01:36, 3 March 2022
Line 75:		Line 75:
	(Note: you should not be asked for your credentials.)		(Note: you should not be asked for your credentials.)

	3. Open a new terminal window and confirm the IP address has changed:		3. Open a new terminal window and confirm the IP address has changed (and that you can reach the outside internet):

	<pre>		<pre>

Unknown user: /* Test Configuration */

2022-03-03T01:36:13Z

Test Configuration

← Older revision		Revision as of 01:36, 3 March 2022
Line 59:		Line 59:
	==Test Configuration==		==Test Configuration==

	~~To test that your~~ OpenVPN ~~is routing traffic through PIA as expected:~~		Test the configuration by manually starting an interactive OpenVPN session in a terminal.

	1. Check your IP:		1. Check your IP before starting OpenVPN:

	<pre>		<pre>
Line 67:		Line 67:
	</pre>		</pre>

	2. Start OpenVPN (interactively) with ~~the~~ PIA config file:		2. Start OpenVPN interactively with a PIA config file:

	<pre>		<pre>
	openvpn --config /etc/openvpn/US.conf		sudo openvpn --config /etc/openvpn/us_california.conf
	</pre>		</pre>

	(Note: you~~'ll~~ be asked for your credentials.)		(Note: you should not be asked for your credentials.)

	3. ~~Repeat step 1~~ and confirm the IP has changed:		3. Open a new terminal window and confirm the IP address has changed:

	<pre>		<pre>

Unknown user: /* Authentication */

2022-03-03T01:34:41Z

Authentication

← Older revision		Revision as of 01:34, 3 March 2022
Line 38:		Line 38:
	echo "$PIA_USERNAME" >> /etc/openvpn/pia_credentials		echo "$PIA_USERNAME" >> /etc/openvpn/pia_credentials
	echo "$PIA_PASSWORD" >> /etc/openvpn/pia_credentials		echo "$PIA_PASSWORD" >> /etc/openvpn/pia_credentials
	chmod ~~640~~ /etc/openvpn/pia_credentials		chmod 600 /etc/openvpn/pia_credentials
	</pre>		</pre>

Line 49:		Line 49:
	</pre>		</pre>

			===Install PIA Profiles for Select Regions===



	Now copy whatever profiles you want into <code>/etc/openvpn/</code>, here's the US and Canada profiles:		Now copy whatever profiles you want into <code>/etc/openvpn/</code>, here's the US and Canada profiles:

Unknown user: /* Authentication */

2022-03-03T01:32:42Z

Authentication

← Older revision		Revision as of 01:32, 3 March 2022
Line 38:		Line 38:
	echo "$PIA_USERNAME" >> /etc/openvpn/pia_credentials		echo "$PIA_USERNAME" >> /etc/openvpn/pia_credentials
	echo "$PIA_PASSWORD" >> /etc/openvpn/pia_credentials		echo "$PIA_PASSWORD" >> /etc/openvpn/pia_credentials
			chmod 640 /etc/openvpn/pia_credentials
	</pre>		</pre>

Line 57:		Line 58:
	sudo cp us_* ca_* /etc/openvpn/.		sudo cp us_* ca_* /etc/openvpn/.
	</pre>		</pre>





	==Test Configuration==		==Test Configuration==

Unknown user at 01:30, 3 March 2022

2022-03-03T01:30:46Z

← Older revision		Revision as of 01:30, 3 March 2022
Line 3:		Line 3:
	=Setup=		=Setup=

	These instructions assume you have ~~set up~~ OpenVPN ~~and it has created an interface <code>tun0</code> at the IP address <code>10.8.0.1</code>~~.		These instructions assume you have installed OpenVPN.

	See [[Kali/OpenVPN]] for setup instructions.		See [[Kali/OpenVPN]] for setup instructions. Or just do the good ol lazy <code>apt-get install openvpn</code>

	=PIA Configuration=		=PIA Configuration=

	Conveniently, PIA provides OpenVPN configuration files to connect to their VPN servers:		Conveniently, PIA provides OpenVPN configuration files to connect to their VPN servers.

			==Download PIA OpenVPN Config Files==

	<pre>		<pre>
Line 16:		Line 18:
	</pre>		</pre>

	~~Not so conveniently~~, the ~~files are named~~ .ovpn ~~and not .conf?~~		This is a folder of .ovpn files, one for each PIA country/region.

			==Copy Certificate Authority==

			Start by copying the PIA certificate authority and CRL (?) into place in <code>/etc/openvpn</code>:

			<pre>
			sudo cp ca.rsa.2048.crt crl.rsa.2048.pem /etc/openvpn/.
			</pre>

			==Authentication==

			===Credentials===

			Put your PIA credentials into a file in <code>/etc/openvpn</code>:

			<pre>
			touch /etc/openvpn/pia_credentials
			echo "$PIA_USERNAME" >> /etc/openvpn/pia_credentials
			echo "$PIA_PASSWORD" >> /etc/openvpn/pia_credentials
			</pre>

			===Modify OpenVPN Profiles===

			Modify all of the OpenVPN profiles to point to this credentials file:

			<pre>
			sed -i -e 's\|auth-user-pass\|& /etc/openvpn/pia_credentials\|' *.ovpn
			</pre>





	~~Copy the profile and certs~~ into <code>/etc/openvpn/</code>:		Now copy whatever profiles you want into <code>/etc/openvpn/</code>, here's the US and Canada profiles:

	<pre>		<pre>
	sudo cp ~~openvpn/ca.rsa.2048.crt openvpn/crl.rsa.2048.pem /etc/openvpn/~~		sudo cp us_* ca_* /etc/openvpn/.
	~~sudo cp "openvpn/US California.ovpn"~~ /etc/openvpn/US.~~conf~~
	</pre>		</pre>

	~~(Note the source is .ovpn extension, the destination is .conf extension)~~



	==Test Configuration==		==Test Configuration==

Unknown user: /* Test Configuration */

2022-03-03T01:19:04Z

Test Configuration

← Older revision		Revision as of 01:19, 3 March 2022
Line 42:		Line 42:
	openvpn --config /etc/openvpn/US.conf		openvpn --config /etc/openvpn/US.conf
	</pre>		</pre>

			(Note: you'll be asked for your credentials.)

	3. Repeat step 1 and confirm the IP has changed:		3. Repeat step 1 and confirm the IP has changed:

Unknown user: /* Test Configuration */

2022-03-03T01:18:04Z

Test Configuration

← Older revision		Revision as of 01:18, 3 March 2022
Line 43:		Line 43:
	</pre>		</pre>

	3. Repeat step 1 and confirm the IP ~~and geolocation have~~ changed		3. Repeat step 1 and confirm the IP has changed:

			<pre>
			curl -4 icanhazip.com
			</pre>

	==Troubleshooting==		==Troubleshooting==

Unknown user: /* Test Configuration */

2022-03-03T01:17:50Z

Test Configuration

← Older revision		Revision as of 01:17, 3 March 2022
Line 31:		Line 31:
	To test that your OpenVPN is routing traffic through PIA as expected:		To test that your OpenVPN is routing traffic through PIA as expected:

	1. Check your IP ~~(one way is to search "whats my ip" on duckduckgo, which will tell you your IP and a geolocation)~~		1. Check your IP:

			<pre>
			curl -4 icanhazip.com
			</pre>

	2. Start OpenVPN (interactively) with the PIA config file:		2. Start OpenVPN (interactively) with the PIA config file: