Encrypt Session & IV with client's public key (taken from client's cert).

If server agrees on target, sets up session:.

Client requests port forwarding to target host & port.

Certificate = server’s x509 certificate.

Certificate = client’s x509 certificate (as a string).

the first message the client sends to the server.

The step numbers are referenced in the code at the points where each task is completed. Openssl pkcs8 -nocrypt -topk8 -inform PEM -in clientprivatekey.pem -outform DER -out r How does it work?īelow is a detailed set of steps breaking down how, using this project, a client and server create a secure communication channel. Openssl x509 -req -in client.csr -CA CA.pem -CAkey CAprivatekey.pem -CAcreateserial -out client.pem Openssl req -out client.csr -new -newkey rsa:2048 -keyout clientprivatekey.pem Openssl req -new -x509 -newkey rsa:2048 -keyout CAprivatekey.pem -out CA.pem Generate the CA certificate and its private key: This program requires that the server's and client's certificates have been signed by the same CA.

Test the encryption is working by looking at the ForwardThread file and uncomment the block of code specified in the file. You should then be able to write text between the two netcats. Open a netcat listening to the target port specified by the client.Ĭonnect a netcat to the client's forward port that it specifies in the logs of its program after the handshake is complete.

handshakehost=localhost -handshakeport=2206 -targethost=localhost -targetport=1337 -usercert=certs/client.pem -cacert=certs/CA.pem -key=certs/r How to test it These are program arguments for the client: handshakeport=2206 -usercert=certs/server.pem -cacert=certs/CA.pem -key=certs/serverprivatekey.pem You should run the ForwardServer class with specific program arguments: In order to run the VPN you need to run the ForwardServer class. Virtual Private Network software built with Java using OpenSSL.

Vpn project in java with source code