Customization web gui? Need link to official client and not profile bundled client.

sliddjur

When a user logs into the web gui, we have enabled only openvpn connect v3 for download.

The big issue with this client is that it has profile bundled, and it makes windows not trust the install file. (everyone is BYOD)
And a big security issue is that the bundled client gets enabled for all windows accounts!
Another issue is that the bundled client does not look for updates automatically.

How can I make a static link to the official openvpn connect file instead?
https://openvpn.net/downloads/openvpn-connect-v3-windows.msi
https://openvpn.net/downloads/openvpn-connect-v3-macos.dmg

openvpn_inc

Hello sliddjur,

We are aware of the bundling problem with the digital signature on Windows. We are moving towards a different way of bundling, but this requires changes across the whole stack, and this takes time. We hope to eventually have a situation where the clients offered by Access Server are always just blank installers, but something in the web browser will trigger the client to pick up the client profile afterwards.

For now if you do not want the bundling, perhaps it would be easier to simply give your users the direct links to the installers, as you have done in this post, so that they do not need to log in to the web service of Access Server at all. Once the client program is installed they can use the import function to do the necessary one-time import of their connection profile.

Kind regards,
Johan

sliddjur

But I need users to log into my web gui to enroll in 2fa anyways.

Adding an external step will just confuse everything for our users.

Why is it so hard to just get a custom link when logged in?

openvpn_inc

Hello sliddjur,

The only way to do as you want is to create new code for the Access Server web interface that does what you want. That is not something you can do without a new release of Access Server. So, sorry, but I cannot give you the answer you want right now. I can only give you the options available right now.

Kind regards,
Johan

sliddjur

No offence, but how hard can it be to add a simple option to offer a link to the openvpn-connect client in addition to the bundled client? Its just a html-link in the web gui...