Customization web gui? Need link to official client and not profile bundled client.

Business solution to host your own OpenVPN server with web management interface and bundled clients.
Post Reply
sliddjur
OpenVpn Newbie
Posts: 12
Joined: Thu Feb 13, 2020 3:13 pm

Customization web gui? Need link to official client and not profile bundled client.

Post by sliddjur » Fri Nov 26, 2021 9:45 am

When a user logs into the web gui, we have enabled only openvpn connect v3 for download.

The big issue with this client is that it has profile bundled, and it makes windows not trust the install file. (everyone is BYOD)
And a big security issue is that the bundled client gets enabled for all windows accounts!
Another issue is that the bundled client does not look for updates automatically.


How can I make a static link to the official openvpn connect file instead?
https://openvpn.net/downloads/openvpn-c ... indows.msi
https://openvpn.net/downloads/openvpn-c ... -macos.dmg

User avatar
openvpn_inc
OpenVPN Inc.
Posts: 1333
Joined: Tue Feb 16, 2021 10:41 am

Re: Customization web gui? Need link to official client and not profile bundled client.

Post by openvpn_inc » Fri Nov 26, 2021 11:57 am

Hello sliddjur,

We are aware of the bundling problem with the digital signature on Windows. We are moving towards a different way of bundling, but this requires changes across the whole stack, and this takes time. We hope to eventually have a situation where the clients offered by Access Server are always just blank installers, but something in the web browser will trigger the client to pick up the client profile afterwards.

For now if you do not want the bundling, perhaps it would be easier to simply give your users the direct links to the installers, as you have done in this post, so that they do not need to log in to the web service of Access Server at all. Once the client program is installed they can use the import function to do the necessary one-time import of their connection profile.

Kind regards,
Johan
Image OpenVPN Inc.
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support

sliddjur
OpenVpn Newbie
Posts: 12
Joined: Thu Feb 13, 2020 3:13 pm

Re: Customization web gui? Need link to official client and not profile bundled client.

Post by sliddjur » Sat Nov 27, 2021 5:18 pm

But I need users to log into my web gui to enroll in 2fa anyways.

Adding an external step will just confuse everything for our users.

Why is it so hard to just get a custom link when logged in?

User avatar
openvpn_inc
OpenVPN Inc.
Posts: 1333
Joined: Tue Feb 16, 2021 10:41 am

Re: Customization web gui? Need link to official client and not profile bundled client.

Post by openvpn_inc » Thu Dec 02, 2021 7:01 am

Hello sliddjur,

The only way to do as you want is to create new code for the Access Server web interface that does what you want. That is not something you can do without a new release of Access Server. So, sorry, but I cannot give you the answer you want right now. I can only give you the options available right now.

Kind regards,
Johan
Image OpenVPN Inc.
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support

sliddjur
OpenVpn Newbie
Posts: 12
Joined: Thu Feb 13, 2020 3:13 pm

Re: Customization web gui? Need link to official client and not profile bundled client.

Post by sliddjur » Fri Dec 03, 2021 9:13 am

No offence, but how hard can it be to add a simple option to offer a link to the openvpn-connect client in addition to the bundled client? Its just a html-link in the web gui...

Post Reply