Installing the Stormshield SSL VPN client

This section explains how to install the Stormshield SSL VPN client on Linux operating systems.

NOTE
This section explains how to install the Stormshield SSL VPN client for Linux in command line interface.

Continue based on the relevant Linux distribution.

Installing in Ubuntu

  1. Install the Stormshield SSL VPN client:

    sudo apt install ./<filename>

    • Replace <filename> with the name of the .deb packet downloaded in advance.
    • With the apt tool, you have to provide the file path of the packet to be installed. In the example, ./ indicates that the packet is available in the current folder.

  2. With the default desktop environment, the Icon of the Stormshield SSL VPN client version 5 icon of the Stormshield SSL VPN client automatically appears in the system tray.

    If you have changed the configuration of the desktop environment or are using a different one, ensure that you show the Stormshield SSL VPN client icon in the system tray, for example by enabling options in the configuration of the desktop environment that you are using, or by installing an additional package.

  3. If your OpenVPN gateway (the SNS firewall) provides a specific DNS configuration to use, the configuration is not natively applied by OpenVPN under Linux. You will need a local solution that can apply it.

    For example, if you use the default DNS resolution manager systemd-resolved:

    1. Install the packet openvpn-systemd-resolved:

      sudo apt install openvpn-systemd-resolved

    2. Create symbolic links so that the Stormshield SSL VPN client can use the script contained in this packet when opening and closing SSL VPN connections. Comply with the location and script names specified in the commands below.

      sudo ln -s /etc/openvpn/update-systemd-resolved /opt/stormshield/sslvpnclient/modules/ssl-vpn/etc/sslvpn_connect.sh
      sudo ln -s /etc/openvpn/update-systemd-resolved /opt/stormshield/sslvpnclient/modules/ssl-vpn/etc/sslvpn_disconnect.sh

Installing in RHEL

  1. Manually add a repository to provide the openvpn dependency, which is not available by default in RHEL. For example, you can add the EPEL (Extra Packages for Enterprise Linux) repository:

    sudo dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm
    sudo dnf update -y

  2. Install the Stormshield SSL VPN client:

    sudo dnf install ./<filename>

    • Replace <filename> with the name of the .rpm packet downloaded in advance.
    • With the dnf tool, you have to provide the file path of the packet to be installed. In the example, ./ indicates that the packet is available in the current folder.

  3. With the default desktop environment, you need to install a package that makes it possible to display the Stormshield SSL VPN client icon Icon of the Stormshield SSL VPN client version 5 in the system tray, such as the gnome-shell-extension-appindicator package. If you are using a different package, ensure that you display the Stormshield SSL VPN client icon in the system tray.

  4. If your OpenVPN gateway (the SNS firewall) provides a specific DNS configuration to use, the configuration is not natively applied by OpenVPN under Linux. You will need a local solution that can apply it.

    You can, for example, use a script equivalent to the one in the openvpn-systemd-resolved package on Ubuntu.

    Once you have the script, you need to create symbolic links so that the Stormshield SSL VPN client can use it when opening and closing SSL VPN connections. Stormshield SSL VPN client scripts have to be placed in the location below and named as follows:

    /opt/stormshield/sslvpnclient/modules/ssl-vpn/etc/sslvpn_connect.sh
    /opt/stormshield/sslvpnclient/modules/ssl-vpn/etc/sslvpn_disconnect.sh