Pi-hole/pivpn
Pi-hole/pivpn
1
0
Fork 0
mirror of https://github.com/pivpn/pivpn.git synced 2024-12-20 11:50:17 +00:00
Code Issues Projects Releases Packages Wiki Activity

Added Optional Duplicate CN

Browse source 
Added screen to allow users to choose either granular per-device certificate control, or per-user certificate control.
This commit is contained in:
justinamcafee 2018-03-09 13:03:04 -06:00 committed by GitHub
parent 3e042ef6ef
commit 5f1bbf3c71
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 26 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

27
auto_install/install.sh
View file

@ -793,6 +793,30 @@ setClientDNS() {
fi
}
setOptDuplicate() {
#Allow the user to choose between allowing or disallowing duplicate certificates. Allows user to manage access on a per-user or per-device basis. Default is off.
DupeCNCmd=(whiptail --separate-output --radiolist "Will certificates be distributed on a per-client or per-device[recommended] basis?" ${r} ${c} 6)
DupeCNChooseOptions=(Per-Device "" on
Per-Client "" off)
if DupeCNchoices=$("${DupeCNCmd[@]}" "${DCNChooseOptions[@]}" 2>&1 >/dev/tty)
then
case ${DupeCNchoices} in
Per-Device)
echo "::Managing certificates by device."
;;
Per-Client)
echo ":: Managing certificates by user."
$SUDO sed -i -e 's/#duplicate-cn/duplicate-cn/g' /etc/openvpn/server.conf
;;
done
;;
esac
else
echo "::: Cancel selected. Exiting..."
exit1
fi
}
confOpenVPN() {
# Generate a random, alphanumeric identifier of 16 characters for this server so that we can use verify-x509-name later that is unique for this server installation. Source: Earthgecko (https://gist.github.com/earthgecko/3089509)
NEW_UUID=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 16 | head -n 1)
@ -1168,6 +1192,7 @@ installPiVPN() {
confNetwork
confOVPN
setClientDNS
setOptDuplicate
confLogging
finalExports
}
@ -1404,7 +1429,7 @@ main() {
echo ":::"
if [[ "${useUpdateVars}" == false ]]; then
echo "::: Installation Complete!"
echo "::: Now run 'pivpn add' to create an ovpn profile for each of your devices."
echo "::: Now run 'pivpn add' to create an ovpn profile for each of your users or devices."
echo "::: Run 'pivpn help' to see what else you can do!"
echo "::: It is strongly recommended you reboot after installation."
else