OpevVPN per user certificate

0 vote

avatar

Hi.
In OpenVPN, we would need to ensure that each user can use their authentication certificate for a given connection, along with a username and password. Each login has its own certificate.
Thanks

All Comments (3)

avatar

Hello,

Is their certificate stored in the same path? I've done some tests and the variables work in the "client certificate" field, so you could configure the entry to use a variable that resolves to their path, or even make custom ones. For more information on variables, you can look at our documentation article here: https://docs.devolutions.net/rdm/kb/rdm-windows/knowledge-base/access-manage-rdm-variables/

Let me know if this helps.

Regards,

Hubert Mireault

avatar

Hi.
We need to store the certificate in a db, in a user vault, or preferably in Keeper. Using local paths is not possible. These are multiple instances on different devices.
Can variables be used in this case as well?
But could at least $IDENTITY_CUSTOM_FIELDx$ work for the Keeper entry.
Alternatively, are there any other fields that can be transferred for a Keeper record?

Thanks and regards

avatar

Hello,

I'm not sure variables would work in your scenario then. While it is possible to point towards a custom path, that would require you to store these certificates in a network drive that is accessible by all of your users as well, which may not be very convenient.

When it comes to Keeper, from what I can see of their API, it should be possible to get attachments from the records, which I assume is how you store your certificates. That wouldn't be difficult to add to the Keeper integration, but we would also have to heavily rework the OpenVPN GUI entry to support this. This is not something we can do in the short term.

Another question, what does your flow look like for your users at the moment? Do they have their individual OpenVPN entries in their user vaults? Or do they use OpenVPN outside of RDM instead?

Regards,

Hubert Mireault