HowTo compile OpenVPN + obfuscation with xorpatch on Debian
- # apt-get install build-essential libssl-dev liblzo2-dev libpam0g-dev easy-rsa
- # wget http://swupdate.openvpn.org/community/releases/openvpn-2.3.7.tar.xz
- # wget https://raw.githubusercontent.com/clayface/openvpn_xorpatch/master/openvpn_xor.patch
- # tar xvf openvpn-2.3.7.tar.xz
- # cd openvpn-2.3.7.tar.xz
- # patch -p1 < ../openvpn_xor.patch
- # ./configure
- # ./make
- # ./make install
You need to put one of the following options in server.conf and client config!
"scramble reverse" - This simply reverses all the data in the packet. This is enough to get past the regular expression detection in both China and Iran.
"scramble xorptrpos" - This performs a xor operation, utilizing the current position in the packet payload.
"scramble obfuscate password" - This method is more secure. It utilizes the 3 types of scrambling mentioned above. "password" is the string which you want to use.
Hi, great tutorial. Does the client have to be patched as well, or is it enough to only patch the server? Thank you
ReplyDelete