alimohammadifar
Hello everyone
I am new to openvpn, I wonder if it is possible to configure the server in a way that is accepts connections of clients having a certificate from a specific CA, or for example having a certificate with a specific common name.
please help
Thanks
maikcat
hi there,
the most common setup is to create your own CA and manage certs by yourself..
Michael.
alimohammadifar
hi, I appreciate your kind response,
yes I made my own CA and made 4 certificates, 1 for the server and others for three clients with common names of client1, client2 and client3. Now in the server side I want to give access to clients having certificates with common names client1 and client2 only but not client3. I do not want to make use of CRL, I wonder if this is possible or I should modify the source code?
maikcat
hi there,
keep in mind you can block access using 3 ways:
1) using CRL list
2) using ccd files and placing disable keyword on clients ccd file
3) using ccd files & ccd-exclusive ,then rename ccd file to something else (to make it missing..).
regards.
Michael.
