Client Cert/Key Required?

[Omid Shojaee]

Hello,

When the authentication method is user+pass, Client Certificate and Key must be included in the client config file?

[Omid Shojaee]

Anybody? Please?

[jarmar]

In my configuration I have the following in the client ovpn file: ca.crt, client.crt, client.key, ta.key.

[TiTex]

Hello,

When the authentication method is user+pass, Client Certificate and Key must be included in the client config file?

it's not required if you set the client-cert-not-required option on the server or the more recent option verify-client-cert none
but the CA is required on the clients to be able to verify the server's certificate

check the manual page for more info
https://openvpn.net/community-resources ... envpn-2-4/

[Omid Shojaee]

Hello,

When the authentication method is user+pass, Client Certificate and Key must be included in the client config file?

it's not required if you set the client-cert-not-required option on the server or the more recent option verify-client-cert none
but the CA is required on the clients to be able to verify the server's certificate

check the manual page for more info
https://openvpn.net/community-resources ... envpn-2-4/

Thank you very much. That's what I needed.