Koozali.org: home of the SME Server

Openvpn Bridge-Drop connection

Offline smnirosh

  • *****
  • 329
  • +0/-0
  • Learning never ends
Openvpn Bridge-Drop connection
« on: February 17, 2016, 09:16:50 AM »
Buongiorno,
I configured openvpn bridge on sme server 9.0 with a Single Server certificate and client certificate. I have two files saved in openvpn config folder, those are "mechd.ovpn and mechd.p12". I sent this two certificate to all users in the domain to connect to server through openvpn. But sometimes  they say the connection is dropping.
Do i have to create certificate to each and everyone of users?

Offline Arnie

  • ****
  • 81
  • +0/-0
  • Old Dog, New Tricks.
Re: Openvpn Bridge-Drop connection
« Reply #1 on: February 18, 2016, 01:51:54 AM »
Please expand on "the connection is dropping".

Can they authenticate and connect, but then the connection drops later, or are they failing to authenticate?

In my experience (small home network), using the one certificate for every user is not a problem. If you want to maximise security, you could generate and deploy a new cert for each user but it depends on how much admin you want to do.
...

Offline Daniel B.

  • *
  • 1,700
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: Openvpn Bridge-Drop connection
« Reply #2 on: February 18, 2016, 02:17:09 PM »
Do i have to create certificate to each and everyone of users?

By default, yes. Look at https://wiki.contribs.org/OpenVPN_Bridge#Advanced_configuration, especially

Code: [Select]
duplicateCN: (enabled|disabled) If you want to allow several clients to connect simultaneously using the same certificate, you need to enable this option (default is disabled)
C'est la fin du monde !!! :lol:

Offline smnirosh

  • *****
  • 329
  • +0/-0
  • Learning never ends
Re: Openvpn Bridge-Drop connection
« Reply #3 on: February 18, 2016, 03:22:43 PM »
Thanks very much Daniel. I enebled "DuplicateCN" option. it is ok now. NO DROPPING THE CONNECTION. STEADY STILL.
thanks very much again