openvpn-terraform-install icon indicating copy to clipboard operation
openvpn-terraform-install copied to clipboard

Bug: Unable to revoke users

Open brnl opened this issue 5 years ago • 0 comments

The script is unable to revoke users. It hangs on the menu system of openvpn-install.sh while trying to revoke user redacted3:

null_resource.openvpn_update_users_script[0] (remote-exec): Revoking certificate for user redacted3!
null_resource.openvpn_update_users_script[0] (remote-exec): 
Welcome to OpenVPN-install!
null_resource.openvpn_update_users_script[0] (remote-exec): The git repository is available at: https://github.com/angristan/openvpn-install

null_resource.openvpn_update_users_script[0] (remote-exec): It looks like OpenVPN is already installed.

null_resource.openvpn_update_users_script[0] (remote-exec): What do you want to do?
null_resource.openvpn_update_users_script[0] (remote-exec):    1) Add a new user
null_resource.openvpn_update_users_script[0] (remote-exec):    2) Revoke existing user
null_resource.openvpn_update_users_script[0] (remote-exec):    3) Remove OpenVPN
null_resource.openvpn_update_users_script[0] (remote-exec):    4) Exit

null_resource.openvpn_update_users_script[0] (remote-exec): Select the existing client certificate you want to revoke
null_resource.openvpn_update_users_script[0] (remote-exec):      1) redacted1
null_resource.openvpn_update_users_script[0] (remote-exec):      2) redacted2
null_resource.openvpn_update_users_script[0] (remote-exec):      3) redacted3
null_resource.openvpn_update_users_script[0] (remote-exec):      4) redacted4
null_resource.openvpn_update_users_script[0] (remote-exec): Select one client [1-4]:

The problem seems that openvpn-install.sh has no way to accept the name of the user as an select option: See line 1080 in openvpn-install.sh:

echo "Select the existing client certificate you want to revoke"
tail -n +2 /etc/openvpn/easy-rsa/pki/index.txt | grep "^V" | cut -d '=' -f 2 | nl -s ') '
if [[ "$NUMBEROFCLIENTS" = '1' ]]; then
	read -rp "Select one client [1]: " CLIENTNUMBER
else
	read -rp "Select one client [1-$NUMBEROFCLIENTS]: " CLIENTNUMBER
fi

Do you have an idea to work around this?

brnl avatar Feb 27 '20 23:02 brnl