VPN server (ocserv) on docker
VPN server (ocserv) is an Open Source SSL VPN server.
It is launched with the following settings
- 2 Device connections for each user (
max-same-clients=2) - Up to 32 clients (
max-clients=32) 10.10.10.0/24as the internal IP pool- Listens on port
5443 - Tunnels DNS to the server
1- copy docker-compose.yml in your Server or clone project
2- Replace the <IP> variable in docker-compse.yml with appropriate value.
3- Run docker-compose up -d.
docker exec -it ocserv ash -c "ocuser create <username>"docker exec ocserv ash -c "ocuser delete <username>"docker exec ocserv ash -c "ocuser lock <username>"docker exec ocserv ash -c "ocuser unlock <username>"view ocpasswd file
docker exec ocserv cat /etc/ocserv/data/ocpasswd
if you having problem with android or ios client , make sure to force connecting through TLS1.2 only go inside container and run
sudo nano /etc/ocserv/ocserv.conf
look for this line
tls-priorities = "NORMAL:%SERVER_PRECEDENCE:%COMPAT:-RSA:-VERS-SSL3.0:-ARCFOUR-128"
add this to it -VERS-TLS1.3 so it becomes
tls-priorities = "NORMAL:%SERVER_PRECEDENCE:%COMPAT:-RSA:-VERS-SSL3.0:-ARCFOUR-128:-VERS-TLS1.3"
done , restart now it should fallback to tls1.2 for every connection
the script will generate a self-signed certificate for you inside the container. so ignore the warning you will get warning message about the certificate not being trusted when logging in.