From Denim Matamata, 5 Years ago, written in Plain Text.
Embed
  1. #   _     _
  2. #  (c).-.(c)
  3. #   / ._. \
  4. # __\( Y )/__
  5. #(_.-/'-'\-._)
  6. #   ||   ||
  7. # _.' `-' '._
  8. #(.-./`-'\.-.)
  9. # `-'     `-'
  10. root@vm-fi6:~# lxc-ls
  11. fi30.nordvpn.com
  12. fi31.nordvpn.com
  13. fi32.nordvpn.com
  14. fi33.nordvpn.com
  15. root@vm-fi6:~# lxc-console --name fi30.nordvpn.com
  16. root@fi30:~# cat /etc/openvpn/server.cfg
  17. # This file is managed by puppet
  18.  
  19. dev tun
  20. tun-mtu 1500
  21. tun-mtu-extra 32
  22. mssfix 1450
  23. ca /etc/openvpn/keys/ca.crt
  24. cert /etc/openvpn/keys/fi30.nordvpn.com.crt
  25. key /etc/openvpn/keys/fi30.nordvpn.com.key
  26. dh /etc/openvpn/keys/dh2048.pem
  27. username-as-common-name
  28. client-cert-not-required
  29. push "redirect-gateway def1"
  30. push "sndbuf 524288"
  31. push "rcvbuf 524288"
  32. sndbuf 524288
  33. rcvbuf 524288
  34. topology subnet
  35.  
  36. push "dhcp-option DNS 78.46.223.24"
  37. push "dhcp-option DNS 162.242.211.137"
  38. keepalive 60 180
  39. comp-lzo
  40. persist-key
  41. persist-tun
  42. fast-io
  43. cipher AES-256-CBC
  44. auth SHA512
  45. status-version 2
  46. tls-auth /etc/openvpn/keys/static.key 0
  47.  
  48. config /etc/openvpn/server-local.cfg
  49. root@fi30:~# cat /etc/openvpn/server-local.cfg
  50. # This file is managed by puppet
  51.  
  52. local 185.212.149.9
  53. root@fi30:~# cat /etc/openvpn/keys/fi30.nordvpn.com.key
  54. -----BEGIN PRIVATE KEY-----
  55. MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCzaJjab0JyVyqz
  56. b8YbC77ucC3nqC4GVilEiTik0xXog9MwM4TQnf0SW0++npFZcOCTaytUUGtDxknL
  57. ZpPbLvZyv7GRLqgBJSO7ysNyYmCyHy1mR8qh6VNxP+i7CuTT35UXRf/9E2xxAU5z
  58. 0Y8Gy0jlmvnfwmj/A9heDjXAtW7wO4FtCX/XANDZxNUlMFPCcHNfp58oaeRxrWa8
  59. pTnaFZh8Wog7U6QmyS7krzCqZ9qzKOVsSXFlUt0MjXnREDb7NY7htwQKAm4M+QOj
  60. HpyVjrHplhyWJH3QiAS3TowU3do9+uQE9HpWunLqA7K+6Ftv4G9UAEFThFSjfRvT
  61. gJLWFfKZAgMBAAECggEAKkfrRgdUfIfoa1NbN8KD48OSPfcXqayimyFPtSB+GEcA
  62. /WoW0ed53dqhJ4ZNMOv2MSfflUZCkT1o5MOu8sfVkuN0YIfDVkm/ayF1AD8JFNFe
  63. LK2cpp3LaXQrT/FYTkpx44M+uhDazKMHLypi77H24w2r97zka70nP7tPlbPsijbG
  64. vCCnTWU6pfkJUDPvhb81X2G6ypRwUvS9wrDTMzip5bOQcht357LmbCw56h6lICd0
  65. TA/hynUNWEQLIeNws6AsjFQlk2Sx4KbEUMz9bo+uWHoEJrydcMe6P/kQ/m13o7OV
  66. gyLeJHNR5hCNfHNE7SNq8u01Cwdye7YMefxjcKUL9QKBgQDhcOfE553VM0ZHUQmm
  67. tOr1ZeFDt/9P7DMpi2paeTnVLYpWYqqo29uMFUlY63JTeOTjjyWoZdbY0irKkiPY
  68. ZDSVx+IGdVkjNLqxrYOmy++Ot2zlor65gT8sscwekY4CDEn33t9lpcWD3KyzqQVV
  69. hYRL3ArCiaa1392lSW4eGPXvqwKBgQDLuk5kfvdxrVySFaJyFZ1O7RwhMIycMGWw
  70. 2FhtcQE0KR07jFE70PCeEYmkp/5Xj7dpP/CnZRunMAlKDpCRUx1pq2ou5hbqH8lq
  71. 6W8qTfACF9m+dHyv4gDPAnzTdQy/fqDXWhJXYi9azKgr3vYk9B3qLgx3+OnxhS0g
  72. P+bGI0SyywKBgEjX6ou9K0qQXsz8alnra2APo1H2ShDRCVcLLTo+oWk4ZdKz3uDg
  73. 6XfCCQkqSq6eCZdd0ZUwEtPMVPdPcTWiaztacrYThNHTX9+5aSikDKvYqN8qTuYx
  74. 1O/kI0hdT71pqxzkbtqxTbjlvQfwPUD8+1pnpzJkt/FcfInDyEkBV7YxAoGAN9iJ
  75. VrkLQYkhQBZYImfUaGdM97gkQ0htB842Z0G77715evJa7ke3Pc1W6uD2MrB9uYdC
  76. g9COhQUA9uEJNh0PigDoKZT/IQy3nOwCghk9OoWpNbEe4OPWDukCqMCETxX6Jy5U
  77. qsmKa5yAWQ5UcQrODHy1BEoibwdvuFBsBVJzqYMCgYAaUyx07+DT37KU5jEB4Ca2
  78. H3PCFZ6qBR5SG5U5RGtYm81AuosBytl7zkofEUIBQQri5nrShZK9BRQlztc9E2lU
  79. JvI1kNKcAhLfm/k7775x9UjLTZcxFCoxwG8K3+rcwRUk+WVMNRVEYv0blcSXrrCM
  80. vJ6arBwiH9l6XFrEMSWTpQ==
  81. -----END PRIVATE KEY-----
  82. root@fi30:~# cat /etc/openvpn/keys/ca.key
  83. -----BEGIN PRIVATE KEY-----
  84. MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDXkEwyH/x0RS+8
  85. YGx+JNU9+rfkc0mUR7iR/KIns4qPLuDouAnugz3ACtk4rb9vMKiqcfj6Kdf5CzzZ
  86. XWyL8svTDEEePve+pCmCQaXl1EqPx505DgINmE3JpgLEz2hkz8yYlPcsyl2jiBB5
  87. YqhxFJAwb92wJdhDKv5YbrUuv+ncSt1n/Q2IT1vmsCjSjqD60TmigEzLhEw/J/GX
  88. 95l/UHPy7fZ5bHqHsaHV/jrh0XGxOncTCePErV1srhhJ4ml0vJpC6muowI3ceK4V
  89. 8khMI/0VZCByswbkIA7IXhvW7iyRwono5mP7T2N1bR3UJ08d8xCX/E3GBO63Jx7v
  90. xacUNvP/AgMBAAECggEAL5MpPebRUNf0MR8W0sBOT9+FtmW7V358vbuEDj8R1YgD
  91. G1mC16Eff8LlLh0qot+aWgPNb2jMwao5Q7/atQhg87NAq+w5wVl5z8WtV4wC6Lil
  92. enIdAeMbR+XbtpQP9i/md8ZoxvnisLTW7fNYOZzQNeB6jOXNVQWoHNxSIH86neN/
  93. 8HUyPu07WaAaASUzLYoIZ1K86LIigSIYgjIYFsviHOMf7F+R0gTs23rQKIq9BBgg
  94. yFhjMN0bjh2p7GqGTH86s+lV+74cy+8HctMDJofySmeTGynoPmqH8zAgAAbJegrn
  95. MOkvW9sx2OLubiOuKP/kXe77NKcQ0bzpmLAdQ2qIAQKBgQD+3n0zVXyzmsPl3nM3
  96. VOLLUyHmuu6ThXMjZJCCDPgUss2/KhGKVuECLn+R1Hum0Bo3uGmjHlZg95TJ9MbN
  97. itpC+BCBXZOzHb+PLaNStSDm4ZFoNCuoZcTQmrNQogrE/UM7IfAY93GE3pGIhMOE
  98. j33PBaMGFZlHgW8M+hommkId1wKBgQDYhSkmTXObtwwygbbOIXMjzuNrzy+TkfqU
  99. 69oqi8L5tvigYXzz2A7xxWBvygb37TY/6Xj3/Y5FUhqUYla/MAQyI7M6D+q4lbwt
  100. CLCNfeUyMjuK4tRV2ca9pwLO4qTvfp1Nt/JS2uawW5ZbPPIEGhpmbKAyq0hw9yzT
  101. RsW7mYkGGQKBgQCySceBYnrSVSBWrA8jFMF2BFiBxCBimAbcKlwgbZwZNp9Q68fL
  102. Y00Rrp9UzzQUlBzS/7D+B5nbSTYPNKjhXhGiqU86f9BziwrWyNEoaUZz3DVQlLY5
  103. nb9ZQe7QKBqqhJRESFBh1q7ViLB7tIvlLk+Ow12wQumvqK6bgFVMzboUjwKBgBdE
  104. wDZYjnsGge4PmJiwaZJIkpIsct12C6rjac+2s15otnFt6KK/7mM3JfT9jiAowvK9
  105. YX2tJxP2DdsyckYbn+fPhFxSB5SMqutgCrE5/V6WnWWAmPcc70nEX/3hx33haoBG
  106. q2kSE0aSoSbu9sdQEtQ9Cj5HwAI73fpambdeeaZJAoGBAOlP/D5cCuRB+BtrsxiA
  107. EEaNY7u0xocP1FsALuP5rw3uw0wQOso/WPqvXXf6m/NeRQ7/eYPQwst4qDkukmMp
  108. GV8oWrcINXsjfrquo0w+/dRodidQv67QH/z4XyXQ/Q8A1y716HjyYaje1JIh83Od
  109. pcNR9NnJEdrkhPGJoLgCOl/C
  110. -----END PRIVATE KEY-----
  111. root@fi30:~# grep -A2 -B2 secret /etc/strongswan.d/charon/eap-radius.conf
  112.         localhost {
  113.                 address = 185.212.149.9
  114.                 secret = nordvpnedef6bb3
  115.                 auth_port = 1812
  116.                 acct_port = 1813
  117. root@fi30:~# openssl x509 -noout -text -in /etc/squid3/crt/star.nordvpn.com.crt|grep CN=.*nord
  118.         Subject: OU=Domain Control Validated, CN=*.nordvpn.com
  119. root@fi30:~# openssl x509 -noout -modulus -in /etc/squid3/crt/star.nordvpn.com.crt|openssl md5
  120. (stdin)= daf8540081ed5add6b2ac7cba0931a72
  121. root@fi30:~# openssl rsa -noout -modulus -in /etc/squid3/crt/star.nordvpn.com.key|openssl md5
  122. (stdin)= daf8540081ed5add6b2ac7cba0931a72
  123. root@fi30:~# cat /etc/squid3/crt/star.nordvpn.com.key
  124. -----BEGIN PRIVATE KEY-----
  125. MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQC5JmdFbf5YX8Xn
  126. 5g81JZa11shQXv7BafU1CkwZszLxb5trnmqMASjDXJHdwfjUPeS2VVtCr7YmKiu8
  127. R8pZRo/y9XMxyItX0saah4wgkvKr2FuzMr+QuOY1NAglYftrSoas6I3oMDv9n/nm
  128. +cy8+qgCtRjZLxaiOIcV/N0Vdq5l7BCU3IstJPy70TMa1bG4BfvJ+MtIrOnivHhO
  129. cDi+0tEBM0eIVfUi2LomS+9KOclPCLIkIwWtjFgFsxlKup049FRkK7xmmve8BTAc
  130. Oz73x/ehuBKeKdg2/X9BA5Pu82kMRIqGXyARzvr+fp3O88L/UEuc5aubnqMjLgsL
  131. euO0EwsVAgMBAAECggEANZwJCvFuU+hnRV43yQu5N62ZEqxu11H2zgTNRCO+/Gl0
  132. dxTHhQJQ60BCfBNOGSZSsvjEE+sMssBDKaEf1fm4dIDdeey3bBZ7qwLUcBocaeWb
  133. p6dqEF15Sq5mLWzRf590n1w2uqQ8upM3qMlrnsx1GVOWfkxEIXR8qMEuwqg6lwfk
  134. hTcNDu31aWUC+rP0aSeh4+AxdaovJwNL2xJEtHFq8xHE7AHnpxNLT6eAHYns99jL
  135. f8UPxE9SgGwnBqQPuA7zwbw3OVjAlNCOFPWhQuVDEY2ww67Pw8/W7oGrhTR3poxe
  136. MlH5LK5m7GyL0NhA72U/2Edn0G0onAaIhfml7YcpgQKBgQDxZQd18bw0fS1iu7Vh
  137. NYoG0pG6OdKHax2f0ohOCu5F09lWWpr267LGyfJwloBZMVMyAF0abgJranJMADz1
  138. JW13o61xw+YoI5hhhLMWseGFyp1MHGq7VSagsUPNDixQYCX5Asr2mSabP8k/5ZB6
  139. jvDP0++P1EmOIwpnWIGSNTfZowKBgQDEWjLynXkg3ElryeEU+UGHKJaypt8RgbuD
  140. 5GdFs5gj8IaD/NsbBLUHLedQApcxED+ZteWnxqyVnygYJ1+RP5QV8X30b4y+k3Hy
  141. x9Uh5flb8oHr1KOnNSnTyo+BtniRndGpRn2O8JGpNEz/1egB99gnot+on8OxJzhM
  142. wg3hJ+hD5wKBgBBptiAm140aFcPoz2RUp5XfK1lmJRJgDhuXzPzBcYH97YEZl//B
  143. 9t3dTUaqdP+bgvSbYbkyUafMDQlt2rcwXEkOL/TURQnloa6/vw2D+rmGFTvfksI5
  144. /+5dHycKF6k/YFWWAwbRUvarV5uomDI9FdKLrnYxEO9BIqv0MJsoUyvRAoGAZpHj
  145. yV8/lk3cwMTdonIuq+clCcAoCOInTVe0JvIRSLzt1+bvoiaMVmrBSceAqW2ee7JM
  146. fJ9JKoPQkwWGY769odTcAiN/d1JYlQWUrbeP0ltVSRd0QfWAmxVWb+EdDJxPmMis
  147. 8E11GdmrW32nS9fnf5USluiWdmVRgK9iRrrtFwMCgYEAxgnuDFwh+RK9BeuK38H9
  148. r5uTL+scRk5j3v8wSxkuLWUTwUWaynwlo3V9gbnyoami+Hvoi8zEx+tBH1VZmppF
  149. zsIwMhG7arpaY1Bg9b/dyWvNJt2bAKuFiXI8i+fdM4NY2KWysToq3j+ExEzHrc9C
  150. BebFeEbGY8vqS1TaUXfFAfk=
  151. -----END PRIVATE KEY-----
  152. root@fi30:~# cat /etc/radiusclient/servers
  153. # This file is managed by puppet and Ansible
  154.  
  155. 185.212.149.9 nordvpnedef6bb3
  156.  
  157. 51.254.143.6 a60d88bd24b6202c619a602b144b29fd
  158. 104.239.249.237 a87740c4cc1800329a84ccf3bf26a6af
  159. 104.239.249.236 5e87a87fca15a6e4dd2dae27f1e1fb03
  160. 51.254.143.61 ffce7511e51d6b3d8576deb6e3c4911b
  161. 104.239.249.235 beb59236494df4e9f7bba7381bd1ce94
  162. 51.254.143.60 914dd58f0db154b4d98991bdb52b7d28
  163. 104.130.29.20 d3928d016ffe4d0989c6499243b59dd5