Comments (6)
Remove the user?
As in remove the openvpn
user from the server, or revoke a generated certificate?
from ansible-role-openvpn.
from ansible-role-openvpn.
I took a closer look at this - it's technically possible to revoke a generated cert, but I don't have support for it in the playbook right now.
I don't have enough bandwidth to allow me to get to adding such support right now either, so this will have to go on the backlog.
from ansible-role-openvpn.
from ansible-role-openvpn.
I started to write a PR against this role for this specific issue but instead decided to write a separate role to also implement a different approach for OpenVPN configuration which I think offers more flexibility. FWIW, the specific cert revocation work in this issue is mostly encapsulated in logan2211/ansible-openvpn@6996249 and could probably be adapted to work in this role without too much difficulty.
Instead of using openssl x509
to sign certificates, you build an openssl CA repository and use the openssl ca
tool to manage the repo (sign certs, revoke certs, etc.)
from ansible-role-openvpn.
This is stale, I'm closing it to clean up this repo.
Reopen it if you want, thanks.
from ansible-role-openvpn.
Related Issues (20)
- Client private keys are logged to stdout on the step "generate client config"
- Allow apt version pinning on the installed packages
- Example Playbook do not works out of the box HOT 1
- Add version tags HOT 6
- CRL not working as intended. HOT 1
- sync_certs fails HOT 3
- Enable ansible-lint and yamllint
- Add a greeter & stale issue/pr closer
- Move compilation steps to copr/epel HOT 1
- Add option to push DOMAIN HOT 1
- openvpn_custom_dns option does not work
- LDAP compile - commands not found HOT 2
- Checkpolicy missing for the hooks
- Allow TCP management interface
- Client CSR is not deleted CentOS 7 HOT 1
- Rocky 8: openvpn-auth-ldap.so No such file or directory
- Deprecated cypher options used
- Error on default openvpn_client_config_dir
- How to add new server in the openvpn realm, how to make tunnel
- The revoke.sh script throw "Using configuration from ca.conf" message in cron logs
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ansible-role-openvpn.