Openvpn – Configure username/password only auth in OpenVPN Connect

apple-iosopenvpn

I'm trying to configure my client to use only username/password for authentication.
Unfortunatly, iOS app keeps asking me for a Certificate (I'm not sure it's Client certificate though).

Here is client.config:

client
dev tun
proto tcp
remote ...
resolv-retry infinite
nobind
persist-tun
ca ca.crt
ns-cert-type server
auth-user-pass
auth-retry interact

Here is how it looks on iOS (notice the second field asking a certificate):

enter image description here

Best Answer

I should read app's description on iTunes. I only had to add setenv CLIENT_CERT 0 to my client.ovpn file.

Related Solutions

Openvpn – Problems setting up a VPN: can connect but can’t ping anyone

There seems to be two error is your config:

The Route Push config statement in the Server config should not contain the gateway address:

push "route 192.168.0.0 255.255.255.0"
The route command on the client side is not needed if you push the routes out to the client via the push config statement.

OpenVPN connection from within 2nd subnet in office

As it said, add a float option to the client config and try again.

--float

Allow remote peer to change its IP address and/or port number, such as due to DHCP (this is the default if --remote is not used). --float when specified with --remote allows an OpenVPN session to initially connect to a peer at a known address, however if packets arrive from a new address and pass all authentication tests, the new address will take control of the session. This is useful when you are connecting to a peer which holds a dynamic address such as a dial-in user or DHCP client.

Essentially, --float tells OpenVPN to accept authenticated packets from any address, not only the address which was specified in the --remote option.

Best Answer

Related Solutions

Openvpn – Problems setting up a VPN: can connect but can’t ping anyone

OpenVPN connection from within 2nd subnet in office

Related Topic