Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

password protection #10

Open
gruz123 opened this issue Nov 25, 2021 · 3 comments
Open

password protection #10

gruz123 opened this issue Nov 25, 2021 · 3 comments
Labels
enhancement New feature or request

Comments

@gruz123
Copy link

gruz123 commented Nov 25, 2021

Hi, it's greate! thanks!
How can assing password protection?

@merlijn-sebrechts
Copy link
Contributor

Hi @gruz123! This is currently not possible. Why do you want to use password protection?

The default protection using SSL certificates and private key cryptography is more secure than passwords. Each user has a separate .ovpn config file which includes a (user-specific) private key, an SSL certificate and a shared secret. If you give each users their separate .ovpn config file, there is no need for additional protection using passwords.

@gruz123
Copy link
Author

gruz123 commented Nov 25, 2021

Hi @gruz123! This is currently not possible. Why do you want to use password protection?

The default protection using SSL certificates and private key cryptography is more secure than passwords. Each user has a separate .ovpn config file which includes a (user-specific) private key, an SSL certificate and a shared secret. If you give each users their separate .ovpn config file, there is no need for additional protection using passwords.

in my case it's very important. Some pc use several diferent .ovpn config for several servers, also incase if someone get access to pc, it get access to network.

@merlijn-sebrechts
Copy link
Contributor

I think the best way to solve this issue is to implement PAM or LDAP authentication. I currently don't have time to implement this, but I'll put it on the wishlist.

For reference, if anyone wants to implement this: https://openvpn.net/community-resources/using-alternative-authentication-methods/

@merlijn-sebrechts merlijn-sebrechts added the enhancement New feature or request label Nov 29, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants