From fa21666869ecc019425c01a77fdf0df8ddd39c59 Mon Sep 17 00:00:00 2001 From: IcedComputer <31418197+IcedComputer@users.noreply.github.com> Date: Fri, 18 Oct 2019 21:00:00 -0700 Subject: [PATCH] Create OVPN12_capable file MakeOVPN has been updated to include the -i iOS function to allow users to create an OVPN12 format file that can be used with the iOS keychain. Since the OVPN12 format is incompatible with OpenVPN 2.4 - this change creates a configuration file that determines if the user can create a -i request via MakeOVPN. --- auto_install/install.sh | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/auto_install/install.sh b/auto_install/install.sh index b021052..4bba848 100755 --- a/auto_install/install.sh +++ b/auto_install/install.sh @@ -787,7 +787,10 @@ confOpenVPN() { if [[ ${APPLY_TWO_POINT_FOUR} == false ]]; then - ENCRYPT=$(whiptail --backtitle "Setup OpenVPN" --title "RSA certificate size" --radiolist \ + ## creates a file to determine if the OpenVPN setup is compatible with the OVPN12 format for iOS keychain integration. + echo "true" > /etc/pivpn/OVPN12_Compatible + + ENCRYPT=$(whiptail --backtitle "Setup OpenVPN" --title "RSA certificate size" --radiolist \ "Choose the desired size of your certificate (press space to select):\n This is a certificate that will be generated on your system. The larger the certificate, the more time this will take. For most applications, it is recommended to use 2048 bits. If you are testing, you can use 1024 bits to speed things up, but do not use this for normal use! If you are paranoid about ... things... then grab a cup of joe and pick 4096 bits." ${r} ${c} 3 \ "1024" "Use a 1024-bit certificate (testing only)" OFF \ "2048" "Use a 2048-bit certificate (recommended level)" ON \