ainder
Part 1: Assuming that we are using an external CA to issue credentials, is there a way to configure OpenVPN for client certificate authentication and specify which Root CA is trusted? I do not want to have to upload the certificates of every user. If the user connects with a certificate issued by a trusted CA, he should be able to connect.
Part 2: Once the user’s certificate is authenticated as per 1 above, I would then like to do an LDAP query to Active Directory to ensure that the user is authorized.
Can that be accomplished? If not, is there an alternate mechanism?
Kind Regards,
