webadmin runs the webadmin interface for OpenVPN.openvpn docker container runs the OpenVPN server.The new OpenVPN implementation runs as 4 docker containers:

So I forked the GitHub project and added extra functionality required for enabling the Google Authenticator functionality. The Community edition of OpenVPN does not provide 2 Factor authentication, therefore I had to add this feature.

The PHP gangsta - Google Authenticator project - a PHP implementation of the Google Authenticator reference app originally written for mobile.

OpenVPN-Admin which provides a UI for an administrator and users to set up VPN users.

OpenVPN which provides the VPN functionality.

This OpenVPN solution uses three separate open-source projects: To make the VPN more secure I added 2-Factor authentication using Google’s Authenticator reference application. With more people working from home due to lockdowns, this has required ways for workers to be able to access intranet websites from within their homes without compromising security and without relying on IP address whitelisting as Home IP addresses are not normally static. It uses a custom security protocol that utilizes SSL/TLS for key exchange”. What is OpenVPN?Īccording to Wikipedia: “OpenVPN is an open-source commercial software that implements virtual private network techniques to create secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. The management interface is a simple PHP web interface that uses a MariaDB as a backend. Since I only use the community edition of OpenVPN, this project gives you access to a neat management interface, from which you can create & manage VPN user accounts, and also allow VPN users to download the files that they need to connect to the VPN. Backgroundīefore the need for extra security via 2-factor authentication came up, I was already using OpenVPN with the help of an excellent open-source project in GitHub which provides a web administration interface ( ).

For me, that was a non-starter as all my existing VPN users reside only inside a database. Not only is this plugin difficult to install because of Linux library dependencies, but most importantly it requires a real Unix user for each VPN account you need to setup. Most guides I found on the internet, if not all, talk about using a PAM plugin to extend OpenVPN with 2 Step Authentication. I am writing this article to save you time and effort because this was not straightforward. I recently set up a VPN with 2-Factor Authentication using the Community Edition of OpenVPN and using Google’s standard authenticator.

Forticlient msi download