Client Cert/Key Required?

Scripts to manage certificates or generate config files
Post Reply
Omid Shojaee
OpenVpn Newbie
Posts: 6
Joined: Thu Jan 04, 2018 9:59 am

Client Cert/Key Required?

Post by Omid Shojaee » Thu Jan 09, 2020 4:07 pm

Hello,

When the authentication method is user+pass, Client Certificate and Key must be included in the client config file?

Omid Shojaee
OpenVpn Newbie
Posts: 6
Joined: Thu Jan 04, 2018 9:59 am

Re: Client Cert/Key Required?

Post by Omid Shojaee » Fri Jan 10, 2020 1:21 pm

Anybody? Please?

jarmar
OpenVpn Newbie
Posts: 9
Joined: Sun Nov 03, 2013 7:49 pm

Re: Client Cert/Key Required?

Post by jarmar » Thu Jan 23, 2020 5:06 pm

In my configuration I have the following in the client ovpn file: ca.crt, client.crt, client.key, ta.key.

TiTex
OpenVPN Super User
Posts: 315
Joined: Tue Apr 12, 2011 6:22 am

Re: Client Cert/Key Required?

Post by TiTex » Fri Jan 24, 2020 1:49 pm

Omid Shojaee wrote:
Thu Jan 09, 2020 4:07 pm
Hello,

When the authentication method is user+pass, Client Certificate and Key must be included in the client config file?
it's not required if you set the client-cert-not-required option on the server or the more recent option verify-client-cert none
but the CA is required on the clients to be able to verify the server's certificate

check the manual page for more info
https://openvpn.net/community-resources ... envpn-2-4/

Omid Shojaee
OpenVpn Newbie
Posts: 6
Joined: Thu Jan 04, 2018 9:59 am

Re: Client Cert/Key Required?

Post by Omid Shojaee » Tue Mar 17, 2020 3:37 pm

TiTex wrote:
Fri Jan 24, 2020 1:49 pm
Omid Shojaee wrote:
Thu Jan 09, 2020 4:07 pm
Hello,

When the authentication method is user+pass, Client Certificate and Key must be included in the client config file?
it's not required if you set the client-cert-not-required option on the server or the more recent option verify-client-cert none
but the CA is required on the clients to be able to verify the server's certificate

check the manual page for more info
https://openvpn.net/community-resources ... envpn-2-4/
Thank you very much. That's what I needed.

Post Reply