Hi , i'm using openvpn with radius plugin with this
server config
dev tun0
port 1194
proto udp
user nobody
group nobody
server 10.10.55.0 255.255.255.0
topology subnet
push "route 192.168.5.0 255.255.255.0"
tls-server
client-cert-not-required
username-as-common-name
duplicate-cn
dh dh2048.pem
ca ca.crt
cert office.crt
key office.key
# Radius Plugin for OpenVPN - by default is reading config file /etc/openvpn/radiusplugin.cnf
plugin /etc/openvpn/radiusplugin.so #/path/to/radiusconfig.cnf
comp-lzo
persist-tun
persist-key
verb 3
status openvpn-status.log
log-append openvpn.log
and client config
client
proto udp
dev tun
remote-cert-tls server
remote x.x.x.x 1194
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
verb 3
keepalive 15 60
auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----
truncated
-----END CERTIFICATE-----
</ca>
is the connection still encrypted in this situation, or i need to use client certificates for that ?
i would like to not use client certs because of the overhead , and i'm very happy with the performance of this setup but i would still want the traffic to be encrypted
