Dennis1984
Hi there,
I've dived into OpenVPN for a couple of weeks now and things become clear! I've succesfully set-up an OpenVPN server on OpenWRT and I'm able to connect with Windows 7, Windows 8, Android and iOS devices. The next step is OpenVPN site-to-site but before I'll configure that I've got a question for you.
I created my own CA with OpenSSL and I'm not using the easy-RSA scripts. Works as a charm. My certificates can be used for both the local Wi-Fi and for my OpenVPN. Now, with Wi-Fi (802.1x EAP-TLS) the actual access point is using a FreeRADIUS authentication mechanism.
So, the certificates are sent to the Radius server on the default port. I would like to have the same mechanism with OpenVPN: my Radius server to authenticate the client certificates. My ideal situation is that there are no certificates on the OpenVPN server (for security reasons). I can find a lot on the internet about OpenVPN authenticating with PAM to a Radius server, but all these examples are about the certificate authentication at the OpenVPN server and then username/password at a Radius server. I don't use the latter, for customer friendly reasons I only want certificates to be used (they have a encrypted private key btw).
My question is: is what I want possible at all or do I have to change my ambitions? :roll:
Kind regards,
