openVPN issue

deibertine · 09-24-2009, 01:20 PM

I have setup openVPN in our network in which connects just fine.However I'm running into an issue, well not really an issue but more of a concern since the client side doesnt prompt me for a user credential - this might be a security hole...

Is it something in the openVPN server where I need to configure this?

Please advise on how I can turn on to prompt users when connecting to our vpn server in their openVPN clients.

Cheers,
DB

Berhanie · 09-24-2009, 05:14 PM

What method are you using for authentication? A common authentication method used by the openvpn server is to allow all clients presenting a certificate signed by the server's trusted CA. In that case, users would only be prompted if their private keys are encrypted, i.e. protected by a pass phrase.

deibertine · 09-24-2009, 07:51 PM

I think with a trusted CA, which made sense and figured that was the case... :-)

How do I encrypt this CA in openVPN server?

Berhanie · 09-24-2009, 09:59 PM

It's each user's private key that you can encrypt. This is from the EXAMPLES section of the rsa man page:

Code:

openssl rsa -in key.pem -des3 -out keyout.pem

Although you can also encrypt the openvpn server's private key, it would prevent it from starting automatically, for example, after a reboot.