AC68U, 378.56_2, OpenVPN for 2nd client

[jcarrra]

I set up 378.56_2 and configured an OpenVPN Server in an AC68, then exported the client ovpn.

One thing that surprised me was that ALL ca, certs, and keys for both sides seemed to have been created! Great! (I don't remember it this way from my last setup about 18 months ago that went into an AC66)

At any rate, the ones it built worked perfectly in my first client--a tablet.
Wonderful.

Now I'm stumped. How do I get the ovpn for client 2...n? I exported again, but all the certs, keys, etc are identical to client 1. Doesn't each client have to be unique?
(I do understand the ca is the same)

 

[RMerlin]

If you use the automated key/cert generation, then all clients share the same certs, it's only the username/password that handles the user authentication. If you want certificate-based authentication then you must generate and sign them manually.

 

[jcarrra]

If you use the automated key/cert generation, then all clients share the same certs, it's only the username/password that handles the user authentication. If you want certificate-based authentication then you must generate and sign them manually.

I see. Can multiple ones still connect at the same time if they have same keys/cert?

Incidentally, since you're here if I decide to drop to 378.55 from 56_2, would reset and/or nvram erase be required?

 

[RMerlin]

I see. Can multiple ones still connect at the same time if they have same keys/cert?

Incidentally, since you're here if I decide to drop to 378.55 from 56_2, would reset and/or nvram erase be required?

Yes, the server is configured to allow duplicate common names.

I don't remember what changed between these two specific releases, they are about a year old...

Sent from my Nexus 9 using Tapatalk