openvpn: Add option to download a client package with PEM files
Message ID | 1446157505-23020-1-git-send-email-michael.tremer@ipfire.org |
---|---|
State | Accepted |
Commit | 71af643cda77f02a006613f3fcc1a223a88f01a6 |
Headers |
Return-Path: <development-bounces@lists.ipfire.org> Received: from mail01.ipfire.org (mail01.tremer.info [172.28.1.200]) by septima.ipfire.org (Postfix) with ESMTP id 3366A60721 for <patchwork@ipfire.org>; Thu, 29 Oct 2015 23:25:21 +0100 (CET) Received: from hedwig.ipfire.org (localhost [IPv6:::1]) by mail01.ipfire.org (Postfix) with ESMTP id E4BD34688; Thu, 29 Oct 2015 23:25:20 +0100 (CET) Received: from ipfire.tremer.co.uk (167.37.189.80.dyn.plus.net [80.189.37.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 6E95B461B; Thu, 29 Oct 2015 23:25:16 +0100 (CET) From: Michael Tremer <michael.tremer@ipfire.org> To: development@lists.ipfire.org Subject: [PATCH] openvpn: Add option to download a client package with PEM files Date: Thu, 29 Oct 2015 22:25:05 +0000 Message-Id: <1446157505-23020-1-git-send-email-michael.tremer@ipfire.org> X-Mailer: git-send-email 2.4.4 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: IPFire development talk <development.lists.ipfire.org> List-Unsubscribe: <http://lists.ipfire.org/mailman/options/development>, <mailto:development-request@lists.ipfire.org?subject=unsubscribe> List-Archive: <http://lists.ipfire.org/pipermail/development/> List-Post: <mailto:development@lists.ipfire.org> List-Help: <mailto:development-request@lists.ipfire.org?subject=help> List-Subscribe: <http://lists.ipfire.org/mailman/listinfo/development>, <mailto:development-request@lists.ipfire.org?subject=subscribe> Cc: Michael Tremer <michael.tremer@ipfire.org> Errors-To: development-bounces@lists.ipfire.org Sender: "Development" <development-bounces@lists.ipfire.org> |
Message
Michael Tremer
Oct. 30, 2015, 9:25 a.m. UTC
This patch adds the option to download a client package
that comes with a regular PEM and key file instead of a
PKCS12 file which is easier to use with clients that
don't support PKCS12 (like iOS) opposed to converting
the file manually.
This requires that the connection is created without
using a password for the certificate. Then the certificate
is already stored in an insecure way.
This patch also adds this to the Core Update 95 updater.
Fixes: #10966
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
CC: Alexander Marx <alexander.marx@ipfire.org>
---
config/rootfiles/core/95/filelists/files | 1 +
html/cgi-bin/ovpnmain.cgi | 56 +++++++++++++++++++++++++++++---
langs/de/cgi-bin/de.pl | 1 +
langs/en/cgi-bin/en.pl | 1 +
4 files changed, 55 insertions(+), 4 deletions(-)