mergee ca.crt, ta.key into clien.ovpn (#128)

* fixed: easyrsa rm

* added ufw and firewall-cmd commands

* fixed easy-rsa name package name

* Revert "added ufw and firewall-cmd commands"

This reverts commit ddbb0b17d564abeb835d221431d8a9078ff0202e.

* merge ca.crt, ta.key into clien.ovpn closed #72

install.sh

@@ -121,6 +121,7 @@ wget "https://github.com/OpenVPN/easy-rsa/releases/download/v3.0.6/EasyRSA-unix-
 tar -xaf "EasyRSA-unix-v3.0.6.tgz"
 mv "EasyRSA-v3.0.6" /etc/openvpn/easy-rsa
 rm "EasyRSA-unix-v3.0.6.tgz"
+
 cd /etc/openvpn/easy-rsa
 
 if [[ ! -z $key_size ]]; then
@@ -231,8 +232,14 @@ sed -i "s/\$user = '';/\$user = '$mysql_user';/" "./include/config.php"
 sed -i "s/\$pass = '';/\$pass = '$mysql_pass';/" "./include/config.php"
 
 # Replace in the client configurations with the ip of the server and openvpn protocol
-for file in "./client-conf/gnu-linux/client.conf" "./client-conf/osx-viscosity/client.conf" "./client-conf/windows/client.ovpn"; do
-  sed -i "s/remote xxx\.xxx\.xxx\.xxx 443/remote $ip_server $server_port/" $file
+for file in $(find -name client.ovpn); do
+    sed -i "s/remote xxx\.xxx\.xxx\.xxx 443/remote $ip_server $server_port/" $file
+    echo "<ca>" >> $file
+    cat "/etc/openvpn/ca.crt" >> $file
+    echo "</ca>" >> $file
+    echo "<tls-auth>" >> $file
+    cat "/etc/openvpn/ta.key" >> $file
+    echo "</tls-auth>"
 
   if [ $openvpn_proto = "udp" ]; then
     sed -i "s/proto tcp-client/proto udp/" $file

installation/client-conf/gnu-linux/client.ovpn

@@ -8,8 +8,6 @@ redirect-gateway
 
 # Keys
 # Identity
-ca ca.crt
-tls-auth ta.key 1
 key-direction 1
 remote-cert-tls server
 auth-user-pass

installation/client-conf/osx-viscosity/client.ovpn

@@ -8,8 +8,6 @@ redirect-gateway
 
 # Keys
 # Identity
-ca ca.crt
-tls-auth ta.key 1
 key-direction 1
 remote-cert-tls server
 auth-user-pass

installation/client-conf/windows/client.ovpn

@@ -8,8 +8,6 @@ redirect-gateway
 
 # Keys
 # Identity
-ca ca.crt
-tls-auth ta.key 1
 key-direction 1
 remote-cert-tls server
 auth-user-pass