Initial client connect without password

mstuart2

Hi.

I am working on fully automating the installation and configuration of OpenVPN AS (version 2.1.4 on Ubuntu 16.04). This is working well, however, I've run into a stumbling block when I get to the actual initial client connection.

I see that I can get the server to automatically create a profile for each of my allowed users and that I can export the file, with certificates embedded, and pass it along to them. However, when a user makes the initial connection via a browser so they can download the client files, they are asked for a password. I do not want my users ever to enter a password. Initially, I want to get certificate-only authentication working, and then add on 2-factor using Google Auth. But how can that initial connection work? I tried using certtool to export the client cert & key to p12 and imported it into the browser, but that did not do the trick. What am I missing? Thanks!

mstuart2

Ah, the answer for OS X and Windows was right on this page: https://docs.openvpn.net/docs/access-server/openvpn-access-server-command-line-tools.html#profile-installer-generation

Now, if I can get something going for my users on Linux I'll be all set.

mstuart2

And that answer seems to be here: https://openvpn.net/index.php/access-server/docs/admin-guides/182-how-to-connect-to-access-server-with-linux-clients.html. I so often find that just formulating the question leads me to the answers.