-KS-Silence[AU]
Hello guys,
Is there a way that i can set up my openvpn server so that when a client with valid certificates and keys connects, the server checks the IP that he is connecting from to see if he is connecting from the correct IP and if he isnt to deny the connection even though everything else is valid...
Basically a workers home pc has Valid Certs and Keys, and his CN is whitelisted and his home IP is known....
Someone breaks into his house and steals his pc, and gets the keys and certs off of it, takes those home and tried to connect with those.... How can we refuse the connection?
If there something i can add to the /ccd/<common name> file that Restricts that CN to be only allowed to connect from a SPECIFIC IP?
Sorry if its a bit hard to understand but its kinda hard for me to explain.
Thanks.
janjust
you would need to write a 'tls-verify' script for this, which checks the incoming connection (all present in env vars in the tls-verify script) and then decide to allow/deny access.
-KS-Silence[AU]
would someone kindly be able to write such a script?
i have no idea how to script anything like that unfortunately....
and days of googling isnt helping....
Preferably for the windows Openvpn server if thats possible....
i found a linux based script, but my linux based router (which has openvpn... its an Asus RT-AC66U running Merlin WRT) doesnt seem to execute it... even though its configured to call the script.....
As long as it gets the job done is all i care....
Thanks.
-KS-Silence[AU]
i got the linux script working on my home router so thats my home VPN even more secure 😛
now i just need a windows based script for my game server and its openvpn service.
PS Board admin(s), it'd be nice to be able to edit my own post to avoid a double post...
EDIT: it must be a time restricted thing... time frame needs to be made bigger imo....
