See http://forum.ipfire.org/index.php/topic,7365.0.html for information.
Turns out the CCD does not work if the user has embedded spaces in the CN (field labeled "User's full name or system hostname:" on Road Warrior creation screen). I don't remember exactly, but I believe OpenSSL or OpenVPN itself converts spaces to underscores. You can test this by creating a user, embedding spaces, and then on the server cat /var/log/ovpnserver.log
You will note the Common Name has spaces converted to underscores.
The solution is to write the ccd file with underscores, ie $filename =~ s/ /_/gi;
If someone will point me to the script that creates that, I will be happy to patch and test, then send you the diff.
Rod
NOTE: I have spent a little time looking at this and solving it for an existing installation, but I intend to pull an old router out and reconfigure it for a controlled test, unless someone else can verify my findings independently.
Rod
Hi i can fully acknoledge this. Tried to reproduce your error and found the same problems. i will provide a patch for this.
Alexander Marx
Fachinformatiker Systemintegration
Am 07.01.2013 06:44, schrieb R. W. Rodolico:
See http://forum.ipfire.org/index.php/topic,7365.0.html for information.
Turns out the CCD does not work if the user has embedded spaces in the CN (field labeled "User's full name or system hostname:" on Road Warrior creation screen). I don't remember exactly, but I believe OpenSSL or OpenVPN itself converts spaces to underscores. You can test this by creating a user, embedding spaces, and then on the server cat /var/log/ovpnserver.log
You will note the Common Name has spaces converted to underscores.
The solution is to write the ccd file with underscores, ie $filename =~ s/ /_/gi;
If someone will point me to the script that creates that, I will be happy to patch and test, then send you the diff.
Rod
NOTE: I have spent a little time looking at this and solving it for an existing installation, but I intend to pull an old router out and reconfigure it for a controlled test, unless someone else can verify my findings independently.
Rod
Development mailing list Development@lists.ipfire.org http://lists.ipfire.org/mailman/listinfo/development
Thanks guys.
I merged the patch and it will ship with IPFire 2.13.
Best, -Michael
On Mon, 2013-01-07 at 08:36 +0100, Alexander Marx wrote:
Hi i can fully acknoledge this. Tried to reproduce your error and found the same problems. i will provide a patch for this.
Alexander Marx
Fachinformatiker Systemintegration
Am 07.01.2013 06:44, schrieb R. W. Rodolico:
See http://forum.ipfire.org/index.php/topic,7365.0.html for information.
Turns out the CCD does not work if the user has embedded spaces in the CN (field labeled "User's full name or system hostname:" on Road Warrior creation screen). I don't remember exactly, but I believe OpenSSL or OpenVPN itself converts spaces to underscores. You can test this by creating a user, embedding spaces, and then on the server cat /var/log/ovpnserver.log
You will note the Common Name has spaces converted to underscores.
The solution is to write the ccd file with underscores, ie $filename =~ s/ /_/gi;
If someone will point me to the script that creates that, I will be happy to patch and test, then send you the diff.
Rod
NOTE: I have spent a little time looking at this and solving it for an existing installation, but I intend to pull an old router out and reconfigure it for a controlled test, unless someone else can verify my findings independently.
Rod
Development mailing list Development@lists.ipfire.org http://lists.ipfire.org/mailman/listinfo/development
Development mailing list Development@lists.ipfire.org http://lists.ipfire.org/mailman/listinfo/development
Thank you Alexander, for checking and building the patch.
Michael, thank you for fixing it so rapidly.
And, I do apologize. I ran into this issue while testing several months ago and apparently did not report it.
Rod
On 01/07/2013 05:37 AM, Michael Tremer wrote:
Thanks guys.
I merged the patch and it will ship with IPFire 2.13.
Best, -Michael
On Mon, 2013-01-07 at 08:36 +0100, Alexander Marx wrote:
Hi i can fully acknoledge this. Tried to reproduce your error and found the same problems. i will provide a patch for this.
Alexander Marx
Fachinformatiker Systemintegration
Am 07.01.2013 06:44, schrieb R. W. Rodolico:
See http://forum.ipfire.org/index.php/topic,7365.0.html for information.
Turns out the CCD does not work if the user has embedded spaces in the CN (field labeled "User's full name or system hostname:" on Road Warrior creation screen). I don't remember exactly, but I believe OpenSSL or OpenVPN itself converts spaces to underscores. You can test this by creating a user, embedding spaces, and then on the server cat /var/log/ovpnserver.log
You will note the Common Name has spaces converted to underscores.
The solution is to write the ccd file with underscores, ie $filename =~ s/ /_/gi;
If someone will point me to the script that creates that, I will be happy to patch and test, then send you the diff.
Rod
NOTE: I have spent a little time looking at this and solving it for an existing installation, but I intend to pull an old router out and reconfigure it for a controlled test, unless someone else can verify my findings independently.
Rod
Development mailing list Development@lists.ipfire.org http://lists.ipfire.org/mailman/listinfo/development
Development mailing list Development@lists.ipfire.org http://lists.ipfire.org/mailman/listinfo/development
Development mailing list Development@lists.ipfire.org http://lists.ipfire.org/mailman/listinfo/development
-
Alexander Marx -
Michael Tremer -
R. W. Rodolico