2 separate clients on OpenVPN server

[mekabe remain]

Hi,

I have OpenVPN server running on my Asus RT88AX
One client is accessing with CN = client
and a subnet is routed to this client.
Now I need to connect another client. But when I try the same configuration file on the new client, it also uses the same CN (=client)
And I believe same subnet is being routed to the new client.
How can I select another CN for the new connecting client ?

 

[elorimer]

Hi,

I have OpenVPN server running on my Asus RT88AX
One client is accessing with CN = client
and a subnet is routed to this client.
Now I need to connect another client. But when I try the same configuration file on the new client, it also uses the same CN (=client)
And I believe same subnet is being routed to the new client.
How can I select another CN for the new connecting client ?

There are two ways spelled out in other posts. The first method is to generate unique certificates with different CNs for each client. That is done outside the GUI with the resources in the firmware. The second is to use the same certificates but differentiate based on the username (how you login), and insert in the custom configuration the directive to use the username as the common name. The first is preferable (because the certificates can be revoked for users without upsetting the whole shebang) while the second is easier if you have total control of all the users (more a home setup).

 

[mekabe remain]

There are two ways spelled out in other posts. The first method is to generate unique certificates with different CNs for each client. That is done outside the GUI with the resources in the firmware. The second is to use the same certificates but differentiate based on the username (how you login), and insert in the custom configuration the directive to use the username as the common name. The first is preferable (because the certificates can be revoked for users without upsetting the whole shebang) while the second is easier if you have total control of all the users (more a home setup).

thank you. second one is easier and suitable for my home use. I don'T think I will have to revoke certs anyway. So how can I do that ? What is the custom configuration to use username as CN ?

 

[mekabe remain]

username-as-common-name

is it this one ?

 

[elorimer]

Yes, put that in the custom configuration box on the advanced settings page of the VPN server.