zouminski9 Hello, i set an OpenVPn server on linux. I create some client. When i create server, i fill these informations on subject : C, O, OU, CN. I if i well understand ma y installation, all clients,who got certs created by an unique and same Ca(than server) CA succeed connecting to the VPN server ? Is it possible to filter clients who are created by the same CA but with differents OU (organisation unit ) for example ? How can i do that ? Sorry for my english.
george Is it possible to filter clients who are created by the same CA but with differents OU (organisation unit ) for example ? How can i do that ? If by filter, you mean give restrict them to an IP address and/or restrict thier access, then yes you can.
janjust you can restrict access for certain certificates using a 'tls-verify' script. Read the manual page for details. A sample 'tls-verify' script is, of course, also listed in my book :mrgreen:
