The more I make progress, the more trouble ahead...

x230

I was happily connected to my VPN server, but I guess I was not too happy, because the OpenVPN client dialog (in my Windows 10 notebook, I installed openvpn-install-2.4.8-I602-Win10.exe) didn't show username, it just asked my password.

I wanted to see both username and password being asked.

I added auth-user-pass directive in server.conf and also in client.ovpn.

Restarted the server.

When I tried to reconnect, I was (yes!) asked a username, and a password!
I entered both.
But immediately, another dialog appeared, the same old one, asking for password again!!!

And now, I cannot even connect(says TLS negotiation failed), and my server is 40 minutes (train + walking) away, and the govt wants us inside.

I think, I should not have that auth-user-pass directive on the server side, I have no intention to save password. Caching the username is ok.

All I want is the VPN login dialog in the very beginning ask me username and password.
But I don't want to enter password two times.

TinCanTech, or others members of the forum, please help.

Thank you.

TinCanTech

Sounds like you have protected your private key with a password.

300000

Yes. Too much security make life more trouble . If you like you can use xca software to remove your private key password so it is not ask you again.

x230

TCT,
Yes, I have set password for my private key.

Do you mean that to display a dialog that asks username and password, --auth-user-pass is the correct way, but to use auth-user-pass, I must not have password protected private key?

Displaying username is just aesthetics, but I need to use password with the private key.
If I need to choose, I will be ok with a dialog asking password.

300000,
Thank you for you suggestion, but I think you misunderstood my question.
I do not want to get rid of the password.
I just want to be asked once, not twice.

I also want to asked my username.
So far, my working version only asks password.

My client dialog is like this:
https://ttcshelbyville.wordpress.com/2010/02/07/free-vpn-with-openvpn/

I want to see the dialog like this:
https://www.heise.de/download/product/openvpn-mi-gui-80410

Back to TCT,
I think I need to "make the server ask the client both username and password".

TinCanTech

x230 wrote Yes, I have set password for my private key.

See --askpass in the manual.

If progress is slow then start with the Howto.

x230

Thank you for your time.

askpass:
The manual says "Get certificate password from console or file before we daemonize."

I am not complaining that I am being asked password.
What I am trying to find is how can I make the server ask me for a username as well.

I am afraid I may have not explained things clearly.

When I right click the "connect" menu in the openvpn icon, I am asked password only, no username.

I want to enter both username and password as the figure in URL link above. (https://www.heise.de/download/product/openvpn-mi-gui-80410)

I don't mind entering password.
In fact, I want to enter a password each time I connect to the VPN.
I don't want to store password in a file either.

Note: By 'password', I meant the passphrase I used while creating client key.

TinCanTech

x230 wrote I am afraid I may have not explained things clearly.

Exactly.

x230 wrote Note: By 'password', I meant the passphrase I used while creating client key.

Then use --askpass

x230 wrote I want to enter both username and password

There is no username for a password protected key file.

x230

"There is no username for a password protected key file."

If there is no way for the OpenVPN client GUI to ask me for my username as well, I will stick to what I have now (the client GUI is asking for a passphrase, and I am happy to provide =enter through keyboard= one.)

I see other sites where the client GUI is clearly asking for both the username and password.

If I understood you correctly, then they have either no passphrase set on to their private key file or if they have, they have saved in a text file.
Both are not options for me- I need to protect the private key with a passphrase, and I don't want to save the passphrase.

Are we going in circles? 🙂

TinCanTech

x230 wrote Are we going in circles? 🙂

You are .. 😉

See --askpass and --auth-user-pass to see the difference between the two different stages.

Note: The Windows GUI saves the user-name by default, so you only need to enter it once.
https://community.openvpn.net/openvpn/ticket/866