Whenever I'm on a public wifi I like to use a VPN. The one time I've been a victim of fraud I didn't use a vpn on a public network.
I'm not a fan of most services as they require a month up front and can't be as easily on demand. Digital ocean you can run it as long as you want and that $5 is pro rated for the month and will never cost more and cost only pennies if you only need to run it for a bit. Plus you can change the location to a droplet somewhere else digital ocean has them.
This isn't limited to digital ocean, linode or pretty much any server or vps you have complete control over.
Solution, just use digital ocean and openvpn install. Installing OpenVPN is a little cumbersome, but fortunately someone on github made a shell script that does all the hard work for you.
Github page:
https://github.com/Nyr/openvpn-install
You just need to run this command on a ubuntu:
Code:
sudo wget https://git.io/vpn -O openvpn-install.sh && bash openvpn-install.sh
You'll need to download the .ovpn file that is generated when installation is done onto your computer. The openvpn client you install on your computer will use that file to connect to your droplet.
Video I made is below on how to do this, if you don't want to read the github page.
Here's an example of what that file looks like, changed a little so you can't use my vpn (:
You'll have to download that file which is generated on the server and your openvpn client will use it.
Code:
client
dev tun
proto udp
sndbuf 0
rcvbuf 0
remote 46.101.131.185 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
cipher AES-128-CBC
comp-lzo
setenv opt block-outside-dns
key-direction 1
verb 3
<ca>
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
</ca>
<cert>
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ChangeMe
Validity
Not Before: Jun 4 02:58:04 2016 GMT
Not After : Jun 2 02:58:04 2026 GMT
Subject: CN=client
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:ba:c6:e1:91:8b:f4:92:6b:f7:79:79:0e:6c:2e:
2f:e9:bf:fc:f5:00:2b:b7:70:dd:d0:1a:da:9e:02:
a4:38:7c:1d:54:ab:97:f3:20:27:b8:46:26:7a:ab:
39:c7:86:b4:92:6a:69:d5:df:10:ed:15:ba:3c:c7:
95:a5:c2:bd:b2:38:0a:8c:36:c1:74:8c:13:c4:68:
a0:8f:e0:77:e0:67:44:56:6e:b0:6b:a3:12:56:1f:
d2:b6:53:1d:8c:bb:aa:4e:aa:4e:bd:b5:42:49:08:
46:da:1d:69:79:7e:1f:a2:9c:d7:1d:41:3e:85:38:
0b:6e:44:40:b4:94:01:dc:bc:c3:79:31:66:06:18:
88:43:b3:09:7d:6c:16:7b:86:b2:ab:51:62:9c:22:
7d:ec:22:e4:1c:2a:a5:1d:df:20:4d:59:ec:6e:a2:
a1:70:71:59:a5:61:67:e6:81:0b:73:2f:12:49:5b:
b4:58:f2:9c:60:e1:ef:d4:86:63:c5:2c:02:25:c8:
6e:a9:c9:c2:ca:c0:5b:99:ba:52:8b:c2:c4:e1:49:
b8:07:ce:4b:3d:41:4a:d1:9a:48:22:78:bc:3f:52:
23:31:f8:10:d0:01:98:fe:4e:e0:d1:e5:45:07:f3:
a0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Subject Key Identifier:
CA:52:0F:19:15:F9:7C:0F:CB:0E:D3:02:5C:AE:4C:F3:3F:FB:ED
X509v3 Authority Key Identifier:
keyid:96:A6:4D:90:1E:92:FF:E6:54:59:35:43:16:0A:AD:B7:40:AC:98
DirName:/CN=ChangeMe
serial:EB:5D:E2:37:9E:28:96:BC
X509v3 Extended Key Usage:
TLS Web Client Authentication
X509v3 Key Usage:
Digital Signature
Signature Algorithm: sha256WithRSAEncryption
4a:53:22:dd:a9:cd:e6:ab:b0:ef:be:ad:8d:7d:1c:c7:74:30:
3d:8c:f7:72:3e:37:fa:f7:d2:07:ee:ae:49:7f:53:98:24:0f:
e5:3c:b4:e4:b2:5f:05:1f:46:d2:a0:83:66:8a:7d:e4:ed:63:
32:7c:89:27:8e:5b:44:a9:2a:96:3b:1b:98:a9:e3:3c:9a:2f:
03:02:25:f8:a3:b1:bc:e8:e1:36:6c:e6:37:b7:d9:66:b3:6c:
ed:e3:84:a4:57:5b:37:32:4a:1f:01:92:78:b4:cf:f8:b6:03:
7d:c8:79:b9:59:23:17:d8:d0:9b:65:b2:ab:c4:92:98:19:28:
1f:04:65:49:8b:61:e3:4c:f3:e9:62:46:64:e9:30:fc:74:f7:
d4:fe:0f:00:d5:42:be:a2:c8:d7:b4:ae:57:58:e2:7a:6a:2b:
54:e0:a7:6e:d6:78:94:53:11:32:a0:bd:d4:08:1e:e6:93:d1:
dc:a3:e8:17:00:df:35:b7:47:5c:ee:85:ea:a5:37:de:64:c4:
57:f5:4b:17:d2:7f:e9:0a:9b:aa:b4:b9:e7:b4:42:0c:a2:10:
d9:c5:d2:e8:9c:e9:69:8e:50:28:8e:f2:ac:9d:67:34:fa:3c:
da:5b:ff:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
1d940a349ad9e96c9824203c6ff777d2
a6c01b860c68763bbd5b28d98e4de9d1
a51170d4d7f3a011e8debd7f4688eb43
fec0d90f58032897d3898a3b7a5d3f2d
8496a958496d99a7f4afe9c82512c27e
6df6254017b69dd7fe3eadd786a599e1
e9126ebd337be2f6051e7a61d479b661
2d923ed4173578ac39e5ec2325928da3
b5591049e742db2e48a6fc81442a496e
518c1906710dc1190217d735df083ce7
c8beec3096f817a9bffbf6f5d72691e5
2d5a76a444219e37c846b375306fede4
6c4e486f27319c4ff6dae568232718ce
27497a8af25279f9c0a6abe57707a29e
-----END OpenVPN Static key V1-----
</tls-auth>