authentication via cert

[zouminski9]

Hello,

i set an OpenVPn server on linux. I create some client. When i create server, i fill these informations on subject :
C, O, OU, CN.

I if i well understand ma y installation, all clients,who got certs created by an unique and same Ca(than server) CA succeed connecting to the VPN server ?

Is it possible to filter clients who are created by the same CA but with differents OU (organisation unit ) for example ?
How can i do that ?

Sorry for my english.

[george]

Is it possible to filter clients who are created by the same CA but with differents OU (organisation unit ) for example ?
How can i do that ?

If by filter, you mean give restrict them to an IP address and/or restrict thier access, then yes you can.

[janjust]

you can restrict access for certain certificates using a 'tls-verify' script. Read the manual page for details. A sample 'tls-verify' script is, of course, also listed in my book