#!/bin/sh


USERNAME="andytstewart61@gmail.com"
PASSWORD="andrew61"


PROTO="udp"
TUN="tun1"
REMOTE="remote 38.132.111.190 1194"


CA_CRT='-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIJAMqPelZhSPimMA0GCSqGSIb3DQEBCwUAMIGeMQswCQYD
VQQGEwJQQTELMAkGA1UECBMCUEExDzANBgNVBAcTBlBhbmFtYTEQMA4GA1UEChMH
Tm9yZFZQTjEQMA4GA1UECxMHTm9yZFZQTjEaMBgGA1UEAxMRdWszMDYubm9yZHZw
bi5jb20xEDAOBgNVBCkTB05vcmRWUE4xHzAdBgkqhkiG9w0BCQEWEGNlcnRAbm9y
ZHZwbi5jb20wHhcNMTcxMjE0MTAzMTE2WhcNMjcxMjEyMTAzMTE2WjCBnjELMAkG
A1UEBhMCUEExCzAJBgNVBAgTAlBBMQ8wDQYDVQQHEwZQYW5hbWExEDAOBgNVBAoT
B05vcmRWUE4xEDAOBgNVBAsTB05vcmRWUE4xGjAYBgNVBAMTEXVrMzA2Lm5vcmR2
cG4uY29tMRAwDgYDVQQpEwdOb3JkVlBOMR8wHQYJKoZIhvcNAQkBFhBjZXJ0QG5v
cmR2cG4uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLNiHc14
Htz+oiA5lnNgEsh09tItmXmcPbRSGy4j/qnuhApXHj7GrwaiezKanxWGv5W8SnZV
BWPYrCZpgDwlguW7CATdAR8cZR+h3JzK05yOLpNDjjVYAF9Gxq9zo7z0BvoLoKGJ
Crz9nuv7EEtl9cs7KEkFQ1MPQsKWYtbOrSOghc1Q8nbWjdgv9xM6++YUHJzCQB41
LQGWb+hYx5HQHQVwvBN8u4fDUyvguhcKs07cmyLWZTSuR4Slt2EwAUSk5wMSBSiM
JLVpM8pLlJQRDdWR6W1wXyrZ+Xp2AAmXWGjliHJLaUO1wJoHInrLleLQeIW1edDa
n8llXX/BjS+RywIDAQABo4IBBzCCAQMwHQYDVR0OBBYEFI8zyO4aLTc0U8tTi8VP
kTfSXZBOMIHTBgNVHSMEgcswgciAFI8zyO4aLTc0U8tTi8VPkTfSXZBOoYGkpIGh
MIGeMQswCQYDVQQGEwJQQTELMAkGA1UECBMCUEExDzANBgNVBAcTBlBhbmFtYTEQ
MA4GA1UEChMHTm9yZFZQTjEQMA4GA1UECxMHTm9yZFZQTjEaMBgGA1UEAxMRdWsz
MDYubm9yZHZwbi5jb20xEDAOBgNVBCkTB05vcmRWUE4xHzAdBgkqhkiG9w0BCQEW
EGNlcnRAbm9yZHZwbi5jb22CCQDKj3pWYUj4pjAMBgNVHRMEBTADAQH/MA0GCSqG
SIb3DQEBCwUAA4IBAQBtr8CL8tRpLteGOxBTMW6mf8eeEJsDlxVohUAoJZZFETUY
lwGMwdkWzdXQGZc5S0bh2/yn7hIrDBB4Edt5UNRXiBVqMVZQc0EUIQoZj7M/dEnb
M/sI819gw4/ZHNOdSbRRq3cQuEu0m2udYoJ2v8/LCAyuuc7mVqyk0Tg9w8tBsTIL
2SEblV+U2zx43jzqmgEqLvKQIg7qyTN91SbqBjRCChQ9P1r4MY7l/IC6Ufd2bpjS
KG0UtosJW2Lmj7Q34ygFNX1CVzzJoWzVu2pPgJPX6f8YZA3qaLpsCt/XIuAcCUmA
Oiwv57Zb0+r+aWXa4ZoNtPewEAF6bqlEYvdSRdk2
-----END CERTIFICATE-----'


TLS_AUTH='-----BEGIN OpenVPN Static key V1-----
fa346d2f9f5fc9a0ea10f97c65b7e64a
b9e230ca9682d817c2cb8de4c8695ddf
d014a044bbfac8d29e6b86d511c4fad5
f76fcb86a54dbcd53e69f568d7910713
871d565211f48149fd4dc65e2f267bdf
81957ad5fab556c2d45baa3b83a596bd
df0d2f2f048bd97fc7be4a1a4f8842d7
b260942b1d99e51f3be392cae3badfa7
ccec578dbb9962bd759d677bcf63aa4f
61d6bbb78b82e657e92ba209a1ff52c7
79d290c4f42ecfd7b855e5378294872c
4b2cf4096405915b5dd76bd889fdee3c
81d8b5e734cc837831384f4969026789
ee613e2a15bb379e723f71cca8894f23
80b793f6a6198ccb8536e691d1cdc946
066b68239c9e698500f592a6d3f78ff1
-----END OpenVPN Static key V1-----'


#### Don't modify below here, except the "auth sha512" line ####


#### Ensure gui client disabled ####
if [ `nvram get openvpncl_enable` != 0 ]; then
 nvram set openvpncl_enable=0
 nvram commit
 sleep 10
fi


mkdir /tmp/vpncl; cd /tmp/vpncl


echo -e "$USERNAME\n$PASSWORD" > userpass.txt


echo "#!/bin/sh
iptables -t nat -I POSTROUTING -o $TUN -j MASQUERADE" > route-up.sh


echo "#!/bin/sh
iptables -t nat -D POSTROUTING -o $TUN -j MASQUERADE" > route-down.sh


echo "$CA_CRT" > ca.crt
echo "$TLS_AUTH" > tls-auth.key
sleep 10


echo "client
dev $TUN
proto $PROTO


$REMOTE
resolv-retry infinite
nobind


tun-mtu 1500
tun-mtu-extra 32
mssfix 1450


persist-key
persist-tun
keepalive 5 30


comp-lzo
mute 20
verb 3
log-append /tmp/vpn.log
fast-io


auth-user-pass userpass.txt
script-security 2
remote-cert-tls server
cipher AES-256-CBC
# if the server is relatively new and uses sha512, uncomment the line below

auth sha512


ca ca.crt
tls-auth tls-auth.key 1


daemon" > openvpn.conf


chmod 600 ca.crt tls-auth.key userpass.txt openvpn.conf; chmod 700 route-up.sh route-down.sh


(killall openvpn ; openvpn --config openvpn.conf --route-up /tmp/vpncl/route-up.sh --down-pre /tmp/vpncl/route-down.sh) &


exit 0