Openvpn client export utility
-
Dear all,
I was trying to setup openvpn for road warrior. I was installed openvpn-client-export package on 2.4.2-RELEASE-p1 version.
I was unable to see any function(export utility download) as attachment after setup vpn server and CAs and Cerfificates.
Please advise me how to setup client export utility export and how to setup to download the export utility.
Thank you.
Best Regards,
-
You need to create a USER cert for it able to export. That you see what I assume you believe is your Server in export means you did it wrong - ie you created a USER cert vs a Server cert… Which is just impossible if you would of just ran through the wizard ;)
-
Dear Johnpoz or whom i may concerns,
I created the CA and usercert by openvpn wizard.
Please kindly advise me how to create a user cert for it able to export and how to setup client export utility export.
Thank you.
Best Regards,
-
There is no setup of the client export util.. So you called your user cert "OpenVPn Server Certificate #2" ??? Bad choice of names for a user cert ;) So see my two examples of user certs that connect to openvpn with, etc..
Just export the config and certs you want on the right for the user cert you want to use.. Normally you would call it something like the username or the device that will be connecting.. Notice mine is new-iphone and worklaptop in the 2 examples.
-
Dear Johnpoz or whom it may concerns.
Thank you for your support.
I have some users to connect through VPN export. Is it only 1 connection export per certificate if i created it?
Please kindly advise me.
Thank you.
Best Regards,
-
You could use the same cert for all your connections if you allow for that in the openvpn settings, but would not suggest that.. You should create a cert for each user that will be connecting to your vpn.
Billy, Susan, Kevin, etc.. If they all use just a cert called billy - how will you know who is connecting?
-
To create your users you need to go to
System > User Manager then add
-
You do not need to create user in pfsense to allow for vpn access. You just need to create a user cert using the CA you setup for your openvpn.