pedromarques
Hello,
I'm a linux and openvpn user, and I've been checking if I can put openvpn working without certificates and only with username/password (later to be integrated with an ldap).
I noticed I can do this with the configuration options:
plugin /usr/lib/openvpn/openvpn-auth-ldap.so /etc/openvpn/auth/auth-ldap.conf
client-cert-not-required
But I fear that I might compromise the security of openvpn, is this a safe configuration?
Can anyone tell me the disadvantages of not using certificates?
Thanks in advance,
Pedro Marques
