Openconnect VPN server installation instruction for debian wheezy Rasberry Pi or ARM

ckleea

複雜程度比想象中高

以安排GNUTLS為例，沒有backport repository，要自行 compile
還要裝幾套軟件，每套都要自行 compile
1. gmp-6.0.0
2. libffi-3.2.1
3. libidn-1.30
4. libtasn1-4.5
5. nettle-3.1
6. p11-kit-0.23.1
7. unbound-1.5.3

最後才可 compile GNUTLS-3.4.0

1. ./configure --host=arm-linux-gnueabi --prefix=${GNUTLS_INSTALL} --exec-prefix=${GNUTLS_INSTALL} --disable-openssl-compatibility --disable-doc --disable-tests --disable-valgrind-tests --enable-local-libopts --enable-libopts-install --with-included-libtasn1 --disable-libdane --disable-guile --without-tpm --disable-crywrap --without-idn --disable-silent-rules

複製代碼

ckleea

暫時仍未知最後成功與否

ckleea

不用 compile 上面的 source packages

已經成功

ckleea

先改 /etc/apt/sources.list 為下面的內客

1. deb http://ftp.de.debian.org/debian stable main contrib non-free
   
2. deb-src http://ftp.de.debian.org/debian stable main contrib non-free
   
3. 
   
4. deb http://ftp.debian.org/debian/ wheezy-updates main contrib non-free
   
5. deb-src http://ftp.debian.org/debian/ wheezy-updates main contrib non-free
   
6. 
   
7. deb http://security.debian.org/ wheezy/updates main contrib non-free
   
8. deb-src http://security.debian.org/ wheezy/updates main contrib non-free
   
9. 
   
10. deb http://ftp.de.debian.org/debian/ wheezy-backports main contrib non-free
    
11. deb-src http://ftp.de.debian.org/debian/ wheezy-backports main contrib non-free

複製代碼

然後
apt-get install debian-keyring debian-archive-keyring
apt-get update
apt-get-t wheezy-backports -y install libgnutls28-dev  libgmp3-dev gnutls-bin libreadline-dev libpam0g-dev libwrap0-dev  liblz4-dev  libseccomp-dev libkrb5-dev libprotobuf-c0-dev

最後
# Get OCServ
mkdir /usr/src/ocserv
cd /usr/src/ocserv
wget ftp://ftp.infradead.org/pub/ocserv/ocserv-0.10.4.tar.xz # as of today, latest=0.8.4
tar xvf ocserv-0.10.4.tar.xz
cd ocserv-0.10.4
./configure --prefix=/usr --sysconfdir=/etc --disable-seccomp
make
make install
mkdir /etc/ocserv
cp doc/sample.config /etc/ocserv/
mv /etc/ocserv/sample.config /etc/ocserv/ocserv.conf

ckleea

唔建议大家系 working images 整，因为太多 dependencies issues，整完了会有机会 break the  image

ckleea

特别是 RaspberryPi 的image 会出问题

ckleea

最後在 Raspberry Pi2 ARM 7 成功運作

ckleea

從舊的raspbian 去 upgrade packages 才可以安裝 openconnect VPN server，發覺完成後有 packages 不能如先前運作 (switchfin GUI)；所以建議如想做 ocserv，最好用一個最新版本試

如 Debian 8 Jessie on Raspberry Pi 2 可參考

http://sjoerd.luon.net/posts/2015/02/debian-jessie-on-rpi2/

或

https://www.raspberrypi.org/foru ... 50310&start=125

milanolarry

樓主好偉大呀

ckleea

花了不少心機，現在是可以更新到 0.10.5版本

colapig

樓主，有無 img可以下載？

ckleea

回復 11# colapig


    http://www.telecom-cafe.com/foru ... page%3D1&page=2