Hello, When the authentication method is user+pass, [b]Client Certificate and Key[/b] must be included in the [b]client [/b]config file?

[quote="Omid Shojaee" post_id=88885 time=1578586028 user_id=42832] Hello, When the authentication method is user+pass, [b]Client Certificate and Key[/b] must be included in the [b]client [/b]config file? [/quote] it's not required if you set the [b]client-cert-not-required[/b] option on the server or the more recent option [b]verify-client-cert none[/b] but the CA is required on the clients to be able to verify the server's certificate check the manual page for more info https://openvpn.net/community-resources/reference-manual-for-openvpn-2-4/

[quote=TiTex post_id=89121 time=1579873753 user_id=15056] [quote="Omid Shojaee" post_id=88885 time=1578586028 user_id=42832] Hello, When the authentication method is user+pass, [b]Client Certificate and Key[/b] must be included in the [b]client [/b]config file? [/quote] it's not required if you set the [b]client-cert-not-required[/b] option on the server or the more recent option [b]verify-client-cert none[/b] but the CA is required on the clients to be able to verify the server's certificate check the manual page for more info https://openvpn.net/community-resources/reference-manual-for-openvpn-2-4/ [/quote] Thank you very much. That's what I needed.

Client Cert/Key Required?

Omid Shojaee

Hello,

When the authentication method is user+pass, Client Certificate and Key must be included in the client config file?

Omid Shojaee

Anybody? Please?

jarmar

In my configuration I have the following in the client ovpn file: ca.crt, client.crt, client.key, ta.key.

TiTex

Omid Shojaee wrote Hello,

When the authentication method is user+pass, Client Certificate and Key must be included in the client config file?

it's not required if you set the client-cert-not-required option on the server or the more recent option verify-client-cert none
but the CA is required on the clients to be able to verify the server's certificate

check the manual page for more info
https://openvpn.net/community-resources/reference-manual-for-openvpn-2-4/

Omid Shojaee

TiTex wrote
Omid Shojaee wrote Hello,

When the authentication method is user+pass, Client Certificate and Key must be included in the client config file?
it's not required if you set the client-cert-not-required option on the server or the more recent option verify-client-cert none
but the CA is required on the clients to be able to verify the server's certificate

check the manual page for more info
https://openvpn.net/community-resources/reference-manual-for-openvpn-2-4/

Thank you very much. That's what I needed.