ISTI-ansible-roles
/
ansible-role-openvpn
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add username-as-common-name if the certificate authentication is not enabled.

This commit is contained in:
Andrea Dell'Amico 2020-06-23 13:58:05 +02:00
parent ae1b190337
commit 2999d5ae8d
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
templates/server.conf.j2
View File

@ -40,9 +40,7 @@ compress lz4-v2
push "compress lz4-v2" push "compress lz4-v2"
{% endif %} {% endif %}
keepalive {{ openvpn_keepalive }} keepalive {{ openvpn_keepalive }}
{% if openvpn_cert_auth_enabled %}
tls-server tls-server
{% endif %}
tls-auth {{ openvpn_tls_auth }} 0 tls-auth {{ openvpn_tls_auth }} 0
key-direction 0 key-direction 0
dh {{ openvpn_dh }} dh {{ openvpn_dh }}
@ -52,6 +50,7 @@ key {{ openvpn_key }}
{% if not openvpn_cert_auth_enabled %} {% if not openvpn_cert_auth_enabled %}
# Disable cert-auth # Disable cert-auth
client-cert-not-required client-cert-not-required
username-as-common-name
{% endif %} {% endif %}
{% if openvpn_username_pam_auth %} {% if openvpn_username_pam_auth %}
username-as-common-name username-as-common-name