openvpn connection

[xsurfer]

currently I am using username and password to connect to server.

May I ask for a server and client configuration to connect to server only with the use of certificate so that I may try, study and implement it myself in my server and client configuration.

Thank you.

[janjust]

just follow the howto:
http://openvpn.net/index.php/open-sourc ... l#examples

some work on your part is required.

[xsurfer]

I have already my configurations JanJust but it uses user/passwd authentication.

What I want to try is without user/passwd authentication but with certs only.

Kindly.

[janjust]

The HOWTO explains this quite nicely - did you read it?

on the server side it boils down to commenting out the user auth part (auth-user-pass-verify or some plugin)
on the client side you'd replace 'auth-user ....' by

Code: Select all

cert client.crt
key client.key

that's it. Instructions on how to generate client.{crt,key} are in the HOWTO as well, using the 'easy-rsa' script. The script you want is 'build-key'

[xsurfer]

yes I did read the howto Janjust.

If I am going to make the certs as login authentication, then it should be unique per user, right. So I need to create certs that is unique per client.

[janjust]

yes, that is recommended anyways, as it will allow you to distinguish between different clients/users.