if [[ -f /etc/redhat-release ]]; then

release="centos"

elif cat /etc/issue | grep -q -E -i "debian"; then

release="debian"

elif cat /etc/issue | grep -q -E -i "ubuntu"; then

release="ubuntu"

elif cat /etc/issue | grep -q -E -i "centos|red hat|redhat"; then

release="centos"

elif cat /proc/version | grep -q -E -i "debian"; then

release="debian"

elif cat /proc/version | grep -q -E -i "ubuntu"; then

release="ubuntu"

elif cat /proc/version | grep -q -E -i "centos|red hat|redhat"; then

release="centos"

fi

#bit=`uname -m`

if [[ ! -e ${PID_FILE} ]]; then

PID=""

else

PID=$(cat ${PID_FILE})

fi

ip=$(wget -qO- -t1 -T2 ipinfo.io/ip)

if [[ -z "${ip}" ]]; then

ip=$(wget -qO- -t1 -T2 api.ip.sb/ip)

if [[ -z "${ip}" ]]; then

ip=$(wget -qO- -t1 -T2 members.3322.org/dyndns/getip)

if [[ -z "${ip}" ]]; then

ip="VPS_IP"

fi

fi

fi

mkdir "ocserv" && cd "ocserv"

wget "ftp://ftp.infradead.org/pub/ocserv/ocserv-${ocserv_ver}.tar.xz"

[[ ! -s "ocserv-${ocserv_ver}.tar.xz" ]] && echo -e "${Error} ocserv 源码文件下载失败 !" && rm -rf "ocserv/" && rm -rf "ocserv-${ocserv_ver}.tar.xz" && exit 1

tar -xJf ocserv-0.11.8.tar.xz && cd ocserv-0.11.8

./configure

make

make install

cd .. && cd ..

rm -rf ocserv/

if [[ -e ${file} ]]; then

mkdir "${conf_file}"

wget --no-check-certificate -N -P "${conf_file}" "https://raw.githubusercontent.com/ToyoDAdoubi/doubi/master/other/ocserv.conf"

[[ ! -s "${conf}" ]] && echo -e "${Error} ocserv 配置文件下载失败 !" && rm -rf "${conf_file}" && exit 1

else

echo -e "${Error} ocserv 编译安装失败，请检查！" && exit 1

fi

if ! wget --no-check-certificate https://raw.githubusercontent.com/ToyoDAdoubi/doubi/master/service/ocserv_debian -O /etc/init.d/ocserv; then

echo -e "${Error} ocserv 服务 管理脚本下载失败 !" && over

fi

chmod +x /etc/init.d/ocserv

update-rc.d -f ocserv defaults

echo -e "${Info} ocserv 服务 管理脚本下载完成 !"

min=10000

max=$((60000-$min+1))

num=$(date +%s%N)

echo $(($num%$max+$min))

lalala=$(rand)

mkdir /tmp/ssl && cd /tmp/ssl

echo -e 'cn = "'${lalala}'"

organization = "'${lalala}'"

serial = 1

expiration_days = 365

ca

signing_key

cert_signing_key

crl_signing_key' > ca.tmpl

[[ $? != 0 ]] && echo -e "${Error} 写入SSL证书签名模板失败(ca.tmpl) !" && over

certtool --generate-privkey --outfile ca-key.pem

[[ $? != 0 ]] && echo -e "${Error} 生成SSL证书密匙文件失败(ca-key.pem) !" && over

certtool --generate-self-signed --load-privkey ca-key.pem --template ca.tmpl --outfile ca-cert.pem

[[ $? != 0 ]] && echo -e "${Error} 生成SSL证书文件失败(ca-cert.pem) !" && over

Get_ip

if [[ -z "$ip" ]]; then

echo -e "${Error} 检测外网IP失败 !"

read -e -p "请手动输入你的服务器外网IP:" ip

[[ -z "${ip}" ]] && echo "取消..." && over

fi

echo -e 'cn = "'${ip}'"

organization = "'${lalala}'"

expiration_days = 365

signing_key

encryption_key

tls_www_server' > server.tmpl

[[ $? != 0 ]] && echo -e "${Error} 写入SSL证书签名模板失败(server.tmpl) !" && over

certtool --generate-privkey --outfile server-key.pem

[[ $? != 0 ]] && echo -e "${Error} 生成SSL证书密匙文件失败(server-key.pem) !" && over

certtool --generate-certificate --load-privkey server-key.pem --load-ca-certificate ca-cert.pem --load-ca-privkey ca-key.pem --template server.tmpl --outfile server-cert.pem

[[ $? != 0 ]] && echo -e "${Error} 生成SSL证书文件失败(server-cert.pem) !" && over

mkdir /etc/ocserv/ssl

mv ca-cert.pem /etc/ocserv/ssl/ca-cert.pem

mv ca-key.pem /etc/ocserv/ssl/ca-key.pem

mv server-cert.pem /etc/ocserv/ssl/server-cert.pem

mv server-key.pem /etc/ocserv/ssl/server-key.pem

cd .. && rm -rf /tmp/ssl/

[[ ! -e "/dev/net/tun" ]] && echo -e "${Error} 你的VPS没有开启TUN，请联系IDC或通过VPS控制面板打开TUN/TAP开关 !" && exit 1

if [[ ${release} = "centos" ]]; then

echo -e "${Error} 本脚本不支持 CentOS 系统 !" && exit 1

elif [[ ${release} = "debian" ]]; then

cat /etc/issue |grep 9\..*>/dev/null

if [[ $? = 0 ]]; then

apt-get update

apt-get install vim net-tools pkg-config build-essential libgnutls28-dev libwrap0-dev liblz4-dev libseccomp-dev libreadline-dev libnl-nf-3-dev libev-dev gnutls-bin -y

else

mv /etc/apt/sources.list /etc/apt/sources.list.bak

wget --no-check-certificate -O "/etc/apt/sources.list" "https://raw.githubusercontent.com/ToyoDAdoubi/doubi/master/sources/us.sources.list"

apt-get update

apt-get install vim net-tools pkg-config build-essential libgnutls28-dev libwrap0-dev liblz4-dev libseccomp-dev libreadline-dev libnl-nf-3-dev libev-dev gnutls-bin -y

rm -rf /etc/apt/sources.list

mv /etc/apt/sources.list.bak /etc/apt/sources.list

apt-get update

fi

else

apt-get update

apt-get install vim net-tools pkg-config build-essential libgnutls28-dev libwrap0-dev liblz4-dev libseccomp-dev libreadline-dev libnl-nf-3-dev libev-dev gnutls-bin -y

fi

check_root

[[ -e ${file} ]] && echo -e "${Error} ocserv 已安装，请检查 !" && exit 1

echo -e "${Info} 开始安装/配置 依赖..."

Installation_dependency

echo -e "${Info} 开始下载/安装 配置文件..."

Download_ocserv

echo -e "${Info} 开始下载/安装 服务脚本(init)..."

Service_ocserv

echo -e "${Info} 开始自签SSL证书..."

Generate_SSL

echo -e "${Info} 开始设置账号配置..."

Read_config

Set_Config

echo -e "${Info} 开始设置 iptables防火墙..."

Set_iptables

echo -e "${Info} 开始添加 iptables防火墙规则..."

Add_iptables

echo -e "${Info} 开始保存 iptables防火墙规则..."

Save_iptables

echo -e "${Info} 所有步骤 安装完毕，开始启动..."

Start_ocserv

check_installed_status

check_pid

[[ ! -z ${PID} ]] && echo -e "${Error} ocserv 正在运行，请检查 !" && exit 1

/etc/init.d/ocserv start

sleep 2s

check_pid

[[ ! -z ${PID} ]] && View_Config

check_installed_status

check_pid

[[ -z ${PID} ]] && echo -e "${Error} ocserv 没有运行，请检查 !" && exit 1

/etc/init.d/ocserv stop

check_installed_status

check_pid

[[ ! -z ${PID} ]] && /etc/init.d/ocserv stop

/etc/init.d/ocserv start

sleep 2s

check_pid

[[ ! -z ${PID} ]] && View_Config

[[ ! -e ${conf} ]] && echo -e "${Error} ocserv 配置文件不存在 !" && exit 1

tcp_port=$(cat ${conf}|grep "tcp-port ="|awk -F ' = ' '{print $NF}')

udp_port=$(cat ${conf}|grep "udp-port ="|awk -F ' = ' '{print $NF}')

vim ${conf}

set_tcp_port=$(cat ${conf}|grep "tcp-port ="|awk -F ' = ' '{print $NF}')

set_udp_port=$(cat ${conf}|grep "udp-port ="|awk -F ' = ' '{print $NF}')

Del_iptables

Add_iptables

Save_iptables

echo "是否重启 ocserv ? (Y/n)"

read -e -p "(默认: Y):" yn

[[ -z ${yn} ]] && yn="y"

if [[ ${yn} == [Yy] ]]; then

Restart_ocserv

fi

echo "请输入 要添加的VPN账号 用户名"

read -e -p "(默认: admin):" username

[[ -z "${username}" ]] && username="admin"

echo && echo -e " 用户名 : ${Red_font_prefix}${username}${Font_color_suffix}" && echo

echo "请输入 要添加的VPN账号 密码"

read -e -p "(默认: doub.io):" userpass

[[ -z "${userpass}" ]] && userpass="doub.io"

echo && echo -e " 密码 : ${Red_font_prefix}${userpass}${Font_color_suffix}" && echo

while true

do

echo -e "请输入VPN服务端的TCP端口"

read -e -p "(默认: 443):" set_tcp_port

[[ -z "$set_tcp_port" ]] && set_tcp_port="443"

echo $((${set_tcp_port}+0)) &>/dev/null

if [[ $? -eq 0 ]]; then

if [[ ${set_tcp_port} -ge 1 ]] && [[ ${set_tcp_port} -le 65535 ]]; then

echo && echo -e " TCP端口 : ${Red_font_prefix}${set_tcp_port}${Font_color_suffix}" && echo

break

else

echo -e "${Error} 请输入正确的数字！"

fi

else

echo -e "${Error} 请输入正确的数字！"

fi

done

while true

do

echo -e "请输入VPN服务端的UDP端口"

read -e -p "(默认: ${set_tcp_port}):" set_udp_port

[[ -z "$set_udp_port" ]] && set_udp_port="${set_tcp_port}"

echo $((${set_udp_port}+0)) &>/dev/null

if [[ $? -eq 0 ]]; then

if [[ ${set_udp_port} -ge 1 ]] && [[ ${set_udp_port} -le 65535 ]]; then

echo && echo -e " TCP端口 : ${Red_font_prefix}${set_udp_port}${Font_color_suffix}" && echo

break

else

echo -e "${Error} 请输入正确的数字！"

fi

else

echo -e "${Error} 请输入正确的数字！"

fi

done

Set_username

Set_passwd

echo -e "${userpass}\n${userpass}"|ocpasswd -c ${passwd_file} ${username}

Set_tcp_port

Set_udp_port

sed -i 's/tcp-port = '"$(echo ${tcp_port})"'/tcp-port = '"$(echo ${set_tcp_port})"'/g' ${conf}

sed -i 's/udp-port = '"$(echo ${udp_port})"'/udp-port = '"$(echo ${set_udp_port})"'/g' ${conf}

[[ ! -e ${conf} ]] && echo -e "${Error} ocserv 配置文件不存在 !" && exit 1

conf_text=$(cat ${conf}|grep -v '#')

tcp_port=$(echo -e "${conf_text}"|grep "tcp-port ="|awk -F ' = ' '{print $NF}')

udp_port=$(echo -e "${conf_text}"|grep "udp-port ="|awk -F ' = ' '{print $NF}')

max_same_clients=$(echo -e "${conf_text}"|grep "max-same-clients ="|awk -F ' = ' '{print $NF}')

max_clients=$(echo -e "${conf_text}"|grep "max-clients ="|awk -F ' = ' '{print $NF}')

[[ ! -e ${passwd_file} ]] && echo -e "${Error} ocserv 账号配置文件不存在 !" && exit 1

User_text=$(cat ${passwd_file})

if [[ ! -z ${User_text} ]]; then

User_num=$(echo -e "${User_text}"|wc -l)

user_list_all=""

for((integer = 1; integer <= ${User_num}; integer++))

do

user_name=$(echo -e "${User_text}" | awk -F ':*:' '{print $1}' | sed -n "${integer}p")

user_status=$(echo -e "${User_text}" | awk -F ':*:' '{print $NF}' | sed -n "${integer}p"|cut -c 1)

if [[ ${user_status} == '!' ]]; then

user_status="禁用"

else

user_status="启用"

fi

user_list_all=${user_list_all}"用户名: "${user_name}" 账号状态: "${user_status}"\n"

done

echo && echo -e "用户总数 ${Green_font_prefix}"${User_num}"${Font_color_suffix}"

echo -e ${user_list_all}

fi

Set_username

Set_passwd

user_status=$(cat "${passwd_file}"|grep "${username}"':*:')

[[ ! -z ${user_status} ]] && echo -e "${Error} 用户名已存在 ![ ${username} ]" && exit 1

echo -e "${userpass}\n${userpass}"|ocpasswd -c ${passwd_file} ${username}

user_status=$(cat "${passwd_file}"|grep "${username}"':*:')

if [[ ! -z ${user_status} ]]; then

echo -e "${Info} 账号添加成功 ![ ${username} ]"

else

echo -e "${Error} 账号添加失败 ![ ${username} ]" && exit 1

fi

List_User

[[ ${User_num} == 1 ]] && echo -e "${Error} 当前仅剩一个账号配置，无法删除 !" && exit 1

echo -e "请输入要删除的VPN账号的用户名"

read -e -p "(默认取消):" Del_username

[[ -z "${Del_username}" ]] && echo "已取消..." && exit 1

user_status=$(cat "${passwd_file}"|grep "${Del_username}"':*:')

[[ -z ${user_status} ]] && echo -e "${Error} 用户名不存在 ! [${Del_username}]" && exit 1

ocpasswd -c ${passwd_file} -d ${Del_username}

user_status=$(cat "${passwd_file}"|grep "${Del_username}"':*:')

if [[ -z ${user_status} ]]; then

echo -e "${Info} 删除成功 ! [${Del_username}]"

else

echo -e "${Error} 删除失败 ! [${Del_username}]" && exit 1

fi

List_User

echo -e "请输入要启用/禁用的VPN账号的用户名"

read -e -p "(默认取消):" Modify_username

[[ -z "${Modify_username}" ]] && echo "已取消..." && exit 1

user_status=$(cat "${passwd_file}"|grep "${Modify_username}"':*:')

[[ -z ${user_status} ]] && echo -e "${Error} 用户名不存在 ! [${Modify_username}]" && exit 1

user_status=$(cat "${passwd_file}" | grep "${Modify_username}"':*:' | awk -F ':*:' '{print $NF}' |cut -c 1)

if [[ ${user_status} == '!' ]]; then

ocpasswd -c ${passwd_file} -u ${Modify_username}

user_status=$(cat "${passwd_file}" | grep "${Modify_username}"':*:' | awk -F ':*:' '{print $NF}' |cut -c 1)

if [[ ${user_status} != '!' ]]; then

echo -e "${Info} 启用成功 ! [${Modify_username}]"

else

echo -e "${Error} 启用失败 ! [${Modify_username}]" && exit 1

fi

else

ocpasswd -c ${passwd_file} -l ${Modify_username}

user_status=$(cat "${passwd_file}" | grep "${Modify_username}"':*:' | awk -F ':*:' '{print $NF}' |cut -c 1)

if [[ ${user_status} == '!' ]]; then

echo -e "${Info} 禁用成功 ! [${Modify_username}]"

else

echo -e "${Error} 禁用失败 ! [${Modify_username}]" && exit 1

fi

fi

check_installed_status

echo && echo -e " 你要做什么？

${Green_font_prefix} 0.${Font_color_suffix} 列出 账号配置

————————

${Green_font_prefix} 1.${Font_color_suffix} 添加 账号配置

${Green_font_prefix} 2.${Font_color_suffix} 删除 账号配置

————————

${Green_font_prefix} 3.${Font_color_suffix} 启用/禁用 账号配置

注意：添加/修改/删除 账号配置后，VPN服务端会实时读取，无需重启服务端 !" && echo

read -e -p "(默认: 取消):" set_num

[[ -z "${set_num}" ]] && echo "已取消..." && exit 1

if [[ ${set_num} == "0" ]]; then

List_User

elif [[ ${set_num} == "1" ]]; then

Add_User

elif [[ ${set_num} == "2" ]]; then

Del_User

elif [[ ${set_num} == "3" ]]; then

Modify_User_disabled

else

echo -e "${Error} 请输入正确的数字[1-3]" && exit 1

fi

Get_ip

Read_config

clear && echo "===================================================" && echo

echo -e " AnyConnect 配置信息：" && echo

echo -e " I P\t\t : ${Green_font_prefix}${ip}${Font_color_suffix}"

echo -e " TCP端口\t : ${Green_font_prefix}${tcp_port}${Font_color_suffix}"

echo -e " UDP端口\t : ${Green_font_prefix}${udp_port}${Font_color_suffix}"

echo -e " 单用户设备数限制 : ${Green_font_prefix}${max_same_clients}${Font_color_suffix}"

echo -e " 总用户设备数限制 : ${Green_font_prefix}${max_clients}${Font_color_suffix}"

echo -e "\n 客户端链接请填写 : ${Green_font_prefix}${ip}:${tcp_port}${Font_color_suffix}"

echo && echo "==================================================="

[[ ! -e ${log_file} ]] && echo -e "${Error} ocserv 日志文件不存在 !" && exit 1

echo && echo -e "${Tip} 按 ${Red_font_prefix}Ctrl+C${Font_color_suffix} 终止查看日志" && echo -e "如果需要查看完整日志内容，请用 ${Red_font_prefix}cat ${log_file}${Font_color_suffix} 命令。" && echo

tail -f ${log_file}

check_installed_status "un"

echo "确定要卸载 ocserv ? (y/N)"

echo

read -e -p "(默认: n):" unyn

[[ -z ${unyn} ]] && unyn="n"

if [[ ${unyn} == [Yy] ]]; then

check_pid

[[ ! -z $PID ]] && kill -9 ${PID} && rm -f ${PID_FILE}

Read_config

Del_iptables

Save_iptables

update-rc.d -f ocserv remove

rm -rf /etc/init.d/ocserv

rm -rf "${conf_file}"

rm -rf "${log_file}"

cd '/usr/local/bin' && rm -f occtl

rm -f ocpasswd

cd '/usr/local/bin' && rm -f ocserv-fw

cd '/usr/local/sbin' && rm -f ocserv

cd '/usr/local/share/man/man8' && rm -f ocserv.8

rm -f ocpasswd.8

rm -f occtl.8

echo && echo "ocserv 卸载完成 !" && echo

else

echo && echo "卸载已取消..." && echo

fi

update-rc.d -f ocserv remove

rm -rf /etc/init.d/ocserv

rm -rf "${conf_file}"

rm -rf "${log_file}"

cd '/usr/local/bin' && rm -f occtl

rm -f ocpasswd

cd '/usr/local/bin' && rm -f ocserv-fw

cd '/usr/local/sbin' && rm -f ocserv

cd '/usr/local/share/man/man8' && rm -f ocserv.8

rm -f ocpasswd.8

rm -f occtl.8

echo && echo "安装过程错误，ocserv 卸载完成 !" && echo

echo -e "net.ipv4.ip_forward=1" >> /etc/sysctl.conf

sysctl -p

ifconfig_status=$(ifconfig)

if [[ -z ${ifconfig_status} ]]; then

echo -e "${Error} ifconfig 未安装 !"

read -e -p "请手动输入你的网卡名(一般情况下，网卡名为 eth0，Debian9 则为 ens3，CentOS Ubuntu 最新版本可能为 enpXsX(X代表数字或字母)，OpenVZ 虚拟化则为 venet0):" Network_card

[[ -z "${Network_card}" ]] && echo "取消..." && exit 1

else

Network_card=$(ifconfig|grep "eth0")

if [[ ! -z ${Network_card} ]]; then

Network_card="eth0"

else

Network_card=$(ifconfig|grep "ens3")

if [[ ! -z ${Network_card} ]]; then

Network_card="ens3"

else

Network_card=$(ifconfig|grep "venet0")

if [[ ! -z ${Network_card} ]]; then

Network_card="venet0"

else

ifconfig

read -e -p "检测到本服务器的网卡非 eth0 \ ens3(Debian9) \ venet0(OpenVZ) \ enpXsX(CentOS Ubuntu 最新版本，X代表数字或字母)，请根据上面输出的网卡信息手动输入你的网卡名:" Network_card

[[ -z "${Network_card}" ]] && echo "取消..." && exit 1

fi

fi

fi

fi

iptables -t nat -A POSTROUTING -o ${Network_card} -j MASQUERADE

iptables-save > /etc/iptables.up.rules

echo -e '#!/bin/bash\n/sbin/iptables-restore < /etc/iptables.up.rules' > /etc/network/if-pre-up.d/iptables

chmod +x /etc/network/if-pre-up.d/iptables

sh_new_ver=$(wget --no-check-certificate -qO- -t1 -T3 "https://raw.githubusercontent.com/ToyoDAdoubi/doubi/master/ocserv.sh"|grep 'sh_ver="'|awk -F "=" '{print $NF}'|sed 's/\"//g'|head -1) && sh_new_type="github"

[[ -z ${sh_new_ver} ]] && echo -e "${Error} 无法链接到 Github !" && exit 0

if [[ -e "/etc/init.d/ocserv" ]]; then

rm -rf /etc/init.d/ocserv

Service_ocserv

fi

wget -N --no-check-certificate "https://raw.githubusercontent.com/ToyoDAdoubi/doubi/master/ocserv.sh" && chmod +x ocserv.sh

echo -e "脚本已更新为最新版本[ ${sh_new_ver} ] !(注意：因为更新方式为直接覆盖当前运行的脚本，所以可能下面会提示一些报错，无视即可)" && exit 0