{"id":1085,"date":"2017-11-05T20:16:31","date_gmt":"2017-11-05T19:16:31","guid":{"rendered":"https:\/\/www.aerian.fr\/?p=1085"},"modified":"2018-02-18T13:54:58","modified_gmt":"2018-02-18T12:54:58","slug":"dsm-vpn-certificat-cle","status":"publish","type":"post","link":"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/","title":{"rendered":"(Fran\u00e7ais) Synology DSM, VPN & Couple Certificat \/ Cl\u00e9"},"content":{"rendered":"
\t\t\t

J’ai voulu connecter mon nas Synology \u00e0 un Serveur OpenVPN utilisant un certificat et une cl\u00e9.
\nCependant, je n’ai trouv\u00e9 aucune option dans l’interface de Synology qui me permette de s\u00e9lectionner ce mode de fonctionnement.<\/p>\n<\/div>\n\t\t<\/div><\/div><\/div><\/div><\/div>

<\/div>
\n
\n\t\t\"\"\n\t<\/div>\n\n<\/div><\/div><\/div><\/div>
<\/div><\/div><\/div>
\t\t\t

J’ai donc pris mon courage \u00e0 deux mains, remont\u00e9 mes manches et j’ai commencer \u00e0 trifouiller dans les m\u00e9andres du DSM.
\nJe suis tomb\u00e9 sur une page de documentation qui citait que les fichiers du client VPN \u00e9taient pr\u00e9sent sous le chemin suivant:<\/p>\n

\/usr\/syno\/etc\/synovpnclient\/openvpn\/<\/pre>\n
J’ai \u00e9t\u00e9 voir et effectivement, les fichiers d’OpenVPN sont pr\u00e9sents \u00e0 l’arborescence.
\nUn petit coup de<\/p>\n
openvpn --help\n(...)\n--cert file     : Local certificate in .pem format -- must be signed\n                  by a Certificate Authority in --ca file.\n--extra-certs file : one or more PEM certs that complete the cert chain.\n--key file      : Local private key in .pem format.\n\n<\/pre>\n
On peut voir que les cl\u00e9s et certificats sont support\u00e9es.
\nJ’ai donc import\u00e9 ma configuration dans le r\u00e9pertoire ci-dessus ainsi que les certificats \/ cl\u00e9s.<\/p>\n
Je pensais le lancer \u00e0 travers l’interface de Synology (En utilisant le m\u00eame nom pour le fichier de configuration) mais il semble
\nque cela fasse planter le client web.
\nD’autre part, j’ai remarqu\u00e9 que lors d’une coupure de connexion, cette version d’OpenVPN n’arrive pas \u00e0 remonter la connexion de mani\u00e8re fiable.
\nLe processus reste bloqu\u00e9 sans que la connexion soit fonctionnelle.<\/p>\n
Pour paler \u00e0 ce soucis, j’ai donc cr\u00e9\u00e9 un script sh qui, lanc\u00e9 toute les heures via un cron, ping la passerelle.
\nDans le cas o\u00f9 le ping \u00e9choue, le script tue le processus et le relance.<\/p>\n
IP_GATEWAY=\"10.88.0.1\"\nif [ $(ping -q -c 10 $IP_GATEWAY > \/dev\/null; echo $?) -eq 1 ] ; then\n        if [ $(ps |grep openvpn | grep -v grep | grep -v openvpn.sh | wc -l) -gt 1  ] ; then\n                echo \"[$(date)]Killing proc in error\" >> \/root\/openvpn.log\n                killall openvpn\n        fi\n        echo \"[$(date)]Connection lost, restarting VPN\" >> \/root\/openvpn.log\n        if [ $(lsmod | awk '{print $1}'|grep -E ^tun$ |wc -l) -ne 1 ] ; then\n                \/sbin\/insmod \/lib\/modules\/tun.ko\n        fi\n        cd \/usr\/syno\/etc\/synovpnclient\/openvpn\n        openvpn --config yun.conf --daemon\nelse\n        echo \"[$(date)]Connection successfull, VPN still functionning.\" >> \/root\/openvpn.log\nfi\n<\/code><\/pre>\n<\/div>\n\t\t<\/div><\/div><\/div><\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"
J’ai voulu connecter mon nas Synology \u00e0 un Serveur OpenVPN utilisant un certificat et une cl\u00e9. Cependant, je n’ai trouv\u00e9 aucune option […]<\/p>\n","protected":false},"author":1,"featured_media":1672,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[221],"tags":[227,225,228,199,223,226,224,222],"class_list":["post-1085","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-system","tag-cert","tag-dsm","tag-key","tag-linux","tag-nas","tag-openvpn","tag-synology","tag-system"],"yoast_head":"\n(Fran\u00e7ais) Synology DSM, VPN & Couple Certificat \/ Cl\u00e9 - Aerian.fr<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"(Fran\u00e7ais) Synology DSM, VPN & Couple Certificat \/ Cl\u00e9 - Aerian.fr\" \/>\n<meta property=\"og:description\" content=\"J'ai voulu connecter mon nas Synology \u00e0 un Serveur OpenVPN utilisant un certificat et une cl\u00e9. Cependant, je n'ai trouv\u00e9 aucune option […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/\" \/>\n<meta property=\"og:site_name\" content=\"Aerian.fr\" \/>\n<meta property=\"article:published_time\" content=\"2017-11-05T19:16:31+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-02-18T12:54:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.aerian.fr\/wp-content\/uploads\/2017\/11\/synology.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"400\" \/>\n\t<meta property=\"og:image:height\" content=\"225\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"42\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@LinceAerian\" \/>\n<meta name=\"twitter:site\" content=\"@LinceAerian\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"42\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.aerian.fr\/dsm-vpn-certificat-cle\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.aerian.fr\/dsm-vpn-certificat-cle\/\"},\"author\":{\"name\":\"42\",\"@id\":\"https:\/\/www.aerian.fr\/#\/schema\/person\/622c3cefbea11a0be741137608b4bf8b\"},\"headline\":\"(Fran\u00e7ais) Synology DSM, VPN & Couple Certificat \/ Cl\u00e9\",\"datePublished\":\"2017-11-05T19:16:31+00:00\",\"dateModified\":\"2018-02-18T12:54:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.aerian.fr\/dsm-vpn-certificat-cle\/\"},\"wordCount\":251,\"publisher\":{\"@id\":\"https:\/\/www.aerian.fr\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.aerian.fr\/dsm-vpn-certificat-cle\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.aerian.fr\/wp-content\/uploads\/2017\/11\/synology.jpg\",\"keywords\":[\"cert\",\"dsm\",\"key\",\"linux\",\"nas\",\"openvpn\",\"synology\",\"system\"],\"articleSection\":[\"System\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/\",\"url\":\"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/\",\"name\":\"(Fran\u00e7ais) Synology DSM, VPN & Couple Certificat \/ Cl\u00e9 - Aerian.fr\",\"isPartOf\":{\"@id\":\"https:\/\/www.aerian.fr\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.aerian.fr\/dsm-vpn-certificat-cle\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.aerian.fr\/wp-content\/uploads\/2017\/11\/synology.jpg\",\"datePublished\":\"2017-11-05T19:16:31+00:00\",\"dateModified\":\"2018-02-18T12:54:58+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[[\"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/\"]]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/#primaryimage\",\"url\":\"https:\/\/www.aerian.fr\/wp-content\/uploads\/2017\/11\/synology.jpg\",\"contentUrl\":\"https:\/\/www.aerian.fr\/wp-content\/uploads\/2017\/11\/synology.jpg\",\"width\":400,\"height\":225},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.aerian.fr\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Synology DSM, VPN & Couple Certificat \/ Cl\u00e9\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.aerian.fr\/en\/#website\",\"url\":\"https:\/\/www.aerian.fr\/en\/\",\"name\":\"Aerian.fr\",\"description\":\"Welcome to Aerian.fr\",\"publisher\":{\"@id\":\"https:\/\/www.aerian.fr\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.aerian.fr\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.aerian.fr\/en\/#organization\",\"name\":\"Aerian.fr\",\"url\":\"https:\/\/www.aerian.fr\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.aerian.fr\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.aerian.fr\/wp-content\/uploads\/2012\/01\/logo.png\",\"contentUrl\":\"https:\/\/www.aerian.fr\/wp-content\/uploads\/2012\/01\/logo.png\",\"width\":667,\"height\":522,\"caption\":\"Aerian.fr\"},\"image\":{\"@id\":\"https:\/\/www.aerian.fr\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/LinceAerian\",\"https:\/\/www.linkedin.com\/in\/marleixmathieu\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.aerian.fr\/#\/schema\/person\/622c3cefbea11a0be741137608b4bf8b\",\"name\":\"42\",\"sameAs\":[\"http:\/\/www.aerian.fr\"],\"url\":\"https:\/\/www.aerian.fr\/en\/author\/lince\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"(Fran\u00e7ais) Synology DSM, VPN & Couple Certificat \/ Cl\u00e9 - Aerian.fr","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/","og_locale":"en_US","og_type":"article","og_title":"(Fran\u00e7ais) Synology DSM, VPN & Couple Certificat \/ Cl\u00e9 - Aerian.fr","og_description":"J'ai voulu connecter mon nas Synology \u00e0 un Serveur OpenVPN utilisant un certificat et une cl\u00e9. Cependant, je n'ai trouv\u00e9 aucune option […]","og_url":"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/","og_site_name":"Aerian.fr","article_published_time":"2017-11-05T19:16:31+00:00","article_modified_time":"2018-02-18T12:54:58+00:00","og_image":[{"width":400,"height":225,"url":"https:\/\/www.aerian.fr\/wp-content\/uploads\/2017\/11\/synology.jpg","type":"image\/jpeg"}],"author":"42","twitter_card":"summary_large_image","twitter_creator":"@LinceAerian","twitter_site":"@LinceAerian","twitter_misc":{"Written by":"42","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.aerian.fr\/dsm-vpn-certificat-cle\/#article","isPartOf":{"@id":"https:\/\/www.aerian.fr\/dsm-vpn-certificat-cle\/"},"author":{"name":"42","@id":"https:\/\/www.aerian.fr\/#\/schema\/person\/622c3cefbea11a0be741137608b4bf8b"},"headline":"(Fran\u00e7ais) Synology DSM, VPN & Couple Certificat \/ Cl\u00e9","datePublished":"2017-11-05T19:16:31+00:00","dateModified":"2018-02-18T12:54:58+00:00","mainEntityOfPage":{"@id":"https:\/\/www.aerian.fr\/dsm-vpn-certificat-cle\/"},"wordCount":251,"publisher":{"@id":"https:\/\/www.aerian.fr\/#organization"},"image":{"@id":"https:\/\/www.aerian.fr\/dsm-vpn-certificat-cle\/#primaryimage"},"thumbnailUrl":"https:\/\/www.aerian.fr\/wp-content\/uploads\/2017\/11\/synology.jpg","keywords":["cert","dsm","key","linux","nas","openvpn","synology","system"],"articleSection":["System"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/","url":"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/","name":"(Fran\u00e7ais) Synology DSM, VPN & Couple Certificat \/ Cl\u00e9 - Aerian.fr","isPartOf":{"@id":"https:\/\/www.aerian.fr\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/#primaryimage"},"image":{"@id":"https:\/\/www.aerian.fr\/dsm-vpn-certificat-cle\/#primaryimage"},"thumbnailUrl":"https:\/\/www.aerian.fr\/wp-content\/uploads\/2017\/11\/synology.jpg","datePublished":"2017-11-05T19:16:31+00:00","dateModified":"2018-02-18T12:54:58+00:00","breadcrumb":{"@id":"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":[["https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/"]]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/#primaryimage","url":"https:\/\/www.aerian.fr\/wp-content\/uploads\/2017\/11\/synology.jpg","contentUrl":"https:\/\/www.aerian.fr\/wp-content\/uploads\/2017\/11\/synology.jpg","width":400,"height":225},{"@type":"BreadcrumbList","@id":"https:\/\/www.aerian.fr\/en\/dsm-vpn-certificat-cle\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.aerian.fr\/en\/"},{"@type":"ListItem","position":2,"name":"Synology DSM, VPN & Couple Certificat \/ Cl\u00e9"}]},{"@type":"WebSite","@id":"https:\/\/www.aerian.fr\/en\/#website","url":"https:\/\/www.aerian.fr\/en\/","name":"Aerian.fr","description":"Welcome to Aerian.fr","publisher":{"@id":"https:\/\/www.aerian.fr\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.aerian.fr\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.aerian.fr\/en\/#organization","name":"Aerian.fr","url":"https:\/\/www.aerian.fr\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.aerian.fr\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.aerian.fr\/wp-content\/uploads\/2012\/01\/logo.png","contentUrl":"https:\/\/www.aerian.fr\/wp-content\/uploads\/2012\/01\/logo.png","width":667,"height":522,"caption":"Aerian.fr"},"image":{"@id":"https:\/\/www.aerian.fr\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/LinceAerian","https:\/\/www.linkedin.com\/in\/marleixmathieu"]},{"@type":"Person","@id":"https:\/\/www.aerian.fr\/#\/schema\/person\/622c3cefbea11a0be741137608b4bf8b","name":"42","sameAs":["http:\/\/www.aerian.fr"],"url":"https:\/\/www.aerian.fr\/en\/author\/lince\/"}]}},"_links":{"self":[{"href":"https:\/\/www.aerian.fr\/en\/wp-json\/wp\/v2\/posts\/1085","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.aerian.fr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.aerian.fr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.aerian.fr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.aerian.fr\/en\/wp-json\/wp\/v2\/comments?post=1085"}],"version-history":[{"count":29,"href":"https:\/\/www.aerian.fr\/en\/wp-json\/wp\/v2\/posts\/1085\/revisions"}],"predecessor-version":[{"id":2128,"href":"https:\/\/www.aerian.fr\/en\/wp-json\/wp\/v2\/posts\/1085\/revisions\/2128"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.aerian.fr\/en\/wp-json\/wp\/v2\/media\/1672"}],"wp:attachment":[{"href":"https:\/\/www.aerian.fr\/en\/wp-json\/wp\/v2\/media?parent=1085"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.aerian.fr\/en\/wp-json\/wp\/v2\/categories?post=1085"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.aerian.fr\/en\/wp-json\/wp\/v2\/tags?post=1085"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}