tafkaks
I have a VPN running on 2.2.1 that uses a client config directory containing a single DEFAULT config file that pushes a number of routes back to connecting clients. This is the only file in the ccd directory -- i.e., there are no actual per-user configs in this directory at all. This file is auto-generated every couple of minutes, which is why it is not a part of the server config. This was working extremely well for us.
However, I tried to add this same feature to a 2.3.2 openvpn setup, with very different results. It seems that openvpn now expects that when client-config-dir is specified, a file (even if empty) MUST exist corresponding to the CN for any connecting client. So when I specifiy a ccd directory with just my auto-generated DEFAULT file, I get an auth error on any user connect.:
TLS Auth Error: --client-config-dir authentication failed for common name 'foo' file='ccd/foo'
Is there a way to revert back to the old behavior? That is, to not require one ccd entry per connecting CN?
Thanx in advance -- mikey
