蘋果OpenVPN的客戶端配置文件

Windows和Linux的客戶端配置文件、ca證書、客戶端證書、客戶端秘鑰、TLS-auth密鑰

都是保存在不同的文件裏，然後配置文件裏配置路徑和文件名的方式來讀取這些證書和秘鑰。

但是iPhone裏這樣配置是行不通的，iPhone的OpenVPN是直接把證書和秘鑰寫在配置文件裏。

下面就是我配置我的iPhone手機端的配置文件，可以參考以下配置。

#iPhone-OpenVPN客戶端配置模板
client
dev tun
connect-retry-max 5
connect-retry 5
resolv-retry 60
#------------------------
remote 221.195.1.111 3389 tcp-client
#------------------------------------
<http-proxy-user-pass>
kangml
kangml
</http-proxy-user-pass>
resolv-retry infinite
nobind
persist-key
persist-tun
ns-cert-type server
comp-lzo
verb 3
<ca>
ca.crt CA證書
</ca>
#----
<cert>
user01.crt 客戶端的證書
</cert>
#----
<key>
user01.key  客戶端的秘鑰
</key>
#----
key-direction 1
<tls-auth>
ta.key      TLS-auth密鑰
</tls-auth>
#----
auth-user-pass
#----

通過vi或者notepad++打開個證書和秘鑰文件，把加密信息復制到配置文件裏。

下面是修改後的配置文件

#iPhone-OpenVPN客戶端配置模板
client
dev tun
connect-retry-max 5
connect-retry 5
resolv-retry 60
#------------------------
remote 221.195.1.111 3389 tcp-client
#------------------------------------
<http-proxy-user-pass>
kangml
kangml
</http-proxy-user-pass>
resolv-retry infinite
nobind
persist-key
persist-tun
ns-cert-type server
comp-lzo
verb 3
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIBAjANBgkqhkiG9w0BAQsFADCBojELMAkGA1UEBhMCQ04x
DjAMBgNVBAgTBUJlSmluMQ4wDAYDVQQHEwVCZUppbjEVMBMGA1UEChMMd3d3Lmhl
bGxjLmNuMQ0wCwYDVQQLEwRPVlBOMRgwFgYDVQQDEw93d3cuaGVsbGMuY24gQ0Ex
EDAOBgNVBCkTB09wZW5WUE4xITAfBgkqhkiG9w0BCQEWEmxhb3lhbjE5OTdAMTYz
LmNvbTAeFw0xNzA4MjQxMDAzMDZaFw0yNzA4MjIxMDAzMDZaMIGZMQswCQYDVQQG
EwJDTjEOMAwGA1UECBMFQmVKaW4xDjAMBgNVBAcTBUJlSmluMRUwEwYDVQQKEwx3
d3cuaGVsbGMuY24xDTALBgNVBAsTBE9WUE4xDzANBgNVBAMTBnVzZXIwMTEQMA4G
A1UEKRMHT3BlblZQTjEhMB8GCSqGSIb3DQEJARYSbGFveWFuMTk5N0AxNjMuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSScb5suiCynaStEcgl9
qu6MShkd9RBm/j68LktzfJnvEHrYYSmIwno7Sxg3/EwyB0+W1bsLUckz9p3MaoFz
yjLI+qQTNRdksOBwavFpKZcoq/y1nis2eV71c/DJxog7u5jWKCZgXlLbTVddKfll
rFFe4JWIHtozNQBSVtFd8tRXjh2edbQfkJN7xzTA2SqeOCNK7OphPd6aQ4mZxUfO
VSH0hHOoo63RfTl8gvTx/EdtsF5FbV2TqxSx4OTyC0rHwCqfl41kOEEyuQtqgnuN
iE4Lyise+QXcdoxH7CgdKzrVkDR9Vk+gM+zOASELEYK5vwa8rNIw9tu/DkowSEZN
9QIDAQABo4IBWTCCAVUwCQYDVR0TBAIwADAtBglghkgBhvhCAQ0EIBYeRWFzeS1S
U0EgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1UdDgQWBBSk1a9BPSbdQRD4u01l
wOW/XwtctDCB1wYDVR0jBIHPMIHMgBTmdSnXUh5FNlTiwUIy0QdtoCuhd6GBqKSB
pTCBojELMAkGA1UEBhMCQ04xDjAMBgNVBAgTBUJlSmluMQ4wDAYDVQQHEwVCZUpp
bjEVMBMGA1UEChMMd3d3LmhlbGxjLmNuMQ0wCwYDVQQLEwRPVlBOMRgwFgYDVQQD
Ew93d3cuaGVsbGMuY24gQ0ExEDAOBgNVBCkTB09wZW5WUE4xITAfBgkqhkiG9w0B
CQEWEmxhb3lhbjE5OTdAMTYzLmNvbYIJAIheAYAR2WEvMBMGA1UdJQQMMAoGCCsG
AQUFBwMCMAsGA1UdDwQEAwIHgDANBgkqhkiG9w0BAQsFAAOCAQEAUSSwIPZFUUrP
HJKSt4LyY1MVF63JVZnr95W1sM8t4k5FUWSbH9l2QlQTJcL/+h+NbmZJMuoyH+c9
Dz/mwur6K9FGplZ521OG11ztiRfbyc/JMpBo8AaMU8m4N2hcxDp36mJY5udjSQ4z
+fqQMB0YPPHDu4yKUotAtaxeycwVBhuWX2Oi50WIoMqRVRe18uhZQSqX6L49UP0+
ayN5YVakhgWJkta+p4JwHV8Uiz/NgYqaW8Ymq2tmZDrKc1MnEXNFPI4OmV1lS79I
rsSM42Bk0jVriAKZ2Pq7SDV5L94yKvrtDmqPt+QxmYsLpBGGD7EUK3LqwBp3vhFA
JkLuM+J1GA==
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
</key>
key-direction 1
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
993053371598d5b178f0cafe6b21eca9
f3c842d53e938ca9b8cc888b00a454fa
8d2dbf4ea6d8c1d24baed3b5de1f6c7a
bd0f01e4d2507c1622f974e905f8835c
126febe2f7c3aed838c929a21d4053be
5a6e98318bf5519f7edbd9bfd309fae7
4944de0d535dad0ddcfca310d2430615
71af3f02b62481ebbac7f164ec10cf1d
7ebfe49e8e9b5564486a716de33a1bf8
977b63db991c67c5bc8f7f9149ed5f91
b4b2899eee01e2ccad297ba22a757d31
60ae77bd9d71ad673f14f018fa1e7654
e9a1cffbce63356b15bf6fba83af3aa6
680330216f69661a0154a559fedeea39
1ce37c956b3ccf1ff0cc8f6e15fc3a39
6fcf83716b78549c9360ea60260c80a2
-----END OpenVPN Static key V1-----
</tls-auth>
auth-user-pass

需要註意的是user01.key 客戶端的秘鑰，不需要全部復制.

只需要最後面的 ----BEGIN CERTIFICATE----到----END CERTIFICATE---- 包括這兩句都要一起復制。

-----BEGIN CERTIFICATE-----

************************

-----END CERTIFICATE-----

蘋果OpenVPN的客戶端配置文件