Client VPN without static key or client cert?

[slair]

We are a traditionally a Cisco shop, and use Cisco AnyConnect for mobile VPN access.

We've been trialing OpenVPN and generally like it, but we have one question on mobile VPN access (for laptop users for example).

With Cisco AnyConnect, the user just needs the hostname to connect to (eg. vpn.company.com) and a user name and password. There is no need to give them a TLS Key file or TLS crt file. The Cisco AnyConnect client does check the certificate presented by the VPN server to ensure it's valid and matches the host name the user is connecting to (vpn.company.com).

Is there any way to setup OpenVPN in a similar method? Where the user just enters the URL into OpenVPN and then their user name and password? Or where we can ONLY give them a config file and not have to give them the .crt and .key files?

Thanks!
Sean

[tonyppe]

Looks like this isn't possible? I just asked a similar question. I am still searching for the answers around the web and the documentation here.