Ilya Shipitsin

I've looked through openvpn source code, as far as I understand, "Client Authentication (1.3.6.1.5.5.7.3.2)" is mandatory extension if so, we can pre-check it before connection is ever established. I agree...

@selvanair , it was very easy (for me) to run win11 on my dev machine. I enabled Hyper-V and ran "create new vm" wizard, it allows you to choose "windows...

there's similar implementation https://github.com/Amebis/GEANTLink we can learn from it

what kind of auth do you use ? if login/password, it will not be any usefull.

I think, computer active directory issued certificate would be perfect for such kind of setup.

@rozmansi, Active Directory is a combination of DNS, LDAP and kerberos working together. As long as computer can reach DNS, AD should work. Including domain logon and group policy. I'd...

sure, it comes from openvpn.exe but it depends on GUI how to represent it. well, I agree that automatic creation seems to be good. there's also a way to make...

@selvanair , any progress on that patch ? we are hit by this issue again and again (I played a bit with SoftEtherVPN, I found their approach very nice, named...

do you mean multiple "remote" per config ?

we do not use interactive service if user is administrator