Your location: Your IP: Your status:ProtectedUnprotected · To the tests »

StealthVPN on Linux (OpenVPN & stunnel)

Use wget and unzip to download and extract the OpenVPN configuration files | StealthVPN on Linux (OpenVPN & stunnel)

Download OpenVPN profiles

First download the OpenVPN profiles for using stunnel and extract them. We will create a new directory.

mkdir stealthvpn_stunnel

cd stealthvpn_stunnel

wget --content-disposition "https://www.perfect-privacy.com/downloads/openvpn/get?system=linux&protocol=stealth_stunnel"

unzip -j linux_op24_stealth_stunnel_v4_AES256GCM_in_se.zip

If you have special demands, you can download OpenVPN configurations with further options in the download area (login required).

Copy the OpenVPN profile into place | StealthVPN on Linux (OpenVPN & stunnel)

Set up OpenVPN and stunnel

Select a server location to which you want to establish the VPN connection.

Our tip: Choose a location that is geographically as close as possible to achieve the best speed.

Copy the desired configuration file into the OpenVPN directory. In this example, we have decided to use Basel1.

sudo cp Basel1.conf /etc/openvpn/

Set up an stunnel configuration file | StealthVPN on Linux (OpenVPN & stunnel)

To set up stunnel, create a new configuration file.

sudo nano /etc/stunnel/stunnel.conf

Insert the following content there:

 [openvpn]
client = yes
accept = 127.0.0.1:10000
connect = SERVER_IP:TUNNEL_PORT

Replace the SERVER_IP with the stunnel-specific IP address of the respective server. You can look it up in the overview of stunnel ports and IPs.

For the STUNNEL_PORT you can choose between the following ports: 22, 53, 443, 8085, 9009, 36315. To circumvent blocking, ports 53 and 443 are particularly recommended.

Start stunnel and let it enter the background | StealthVPN on Linux (OpenVPN & stunnel)

Start stunnel

Now stunnel can be started:

sudo stunnel

The program immediately enters the background. This is how you can check whether stunnel is actually running:

ps aux|grep stunnel

Start OpenVPN and wait for it to connect | StealthVPN on Linux (OpenVPN & stunnel)

Start OpenVPN

As soon as stunnel is running, you can start OpenVPN:

sudo openvpn /etc/openvpn/Basel1.conf

After a short time you will be asked for your Perfect Privacy username and password.

When the connection is established, it says Initialization Sequence Completed in the connection log.

Check the VPN connection by downloading the CheckIP data | StealthVPN on Linux (OpenVPN & stunnel)

Check the VPN connection

Now test whether your VPN connection is working correctly. Download the CheckIP data e.g. CSV formatted.

For IPv4:

wget -q -O - https://checkip.perfect-privacy.com/csv

And for IPv6:

wget -q -O - https://v6-checkip.perfect-privacy.com/csv

Configure stunnel to start up on boot | StealthVPN on Linux (OpenVPN & stunnel)

Start the connection on boot

If you want to establish the VPN connection automatically at system startup, you must first start stunnel at boot time. To do this, edit the configuration file:

sudo nano /etc/default/stunnel4

In this file, change the line ENABLED=0 to ENABLED=1.

Create a file containing the username and password | StealthVPN on Linux (OpenVPN & stunnel)

In order for OpenVPN to start automatically, the login credentials must be made available.

Therefore, write your Perfect Privacy login data (user name and password) in a text file:

sudo nano /etc/openvpn/perfect-privacy-password

Provide username and password for OpenVPN | StealthVPN on Linux (OpenVPN & stunnel)

Now you have to specify this password file in the OpenVPN configuration file.

Write the name of the file after the line auth-user-pass:

sudo nano /etc/openvpn/Basel1.conf

That way, the line becomes:

auth-user-pass perfect-privacy-password

Configure OpenVPN to start on boot | StealthVPN on Linux (OpenVPN & stunnel)

Now you only have to tell OpenVPN the configuration that should be started automatically at system startup.

Open the OpenVPN configuration file:

sudo nano /etc/default/openvpn

Insert the following line:

AUTOSTART="Basel1"

Make sure that all other AUTOSTART lines are commented out (# at the beginning of the line).

To test the autostart, restart your computer and go to the CheckIP page to test the connection.

VPN
?!
This website uses cookies to analyze the traffic and to control our advertising. By using this site, you agree to the use of cookies. More information can be found in our privacy policy.