Re: Two questions about key generation for clients

Peter Davis via Openvpn-users <[email protected]>
Newsgroups gmane.network.openvpn.user
Message-ID <8F_g-EyK1QAatDRyX1---YiRXVI0DGA55UeT3SFeJDE_s8dhx6uHtDx0Hf5nDbfHUUgKqappyo8uNAse18xLZ8BL_n2XQU8RW4Wp7SNEqUc=@proton.me>
>On Wednesday, January 17th, 2024 at 2:23 PM, Gert Doering <[email protected]> wrote:


> Hi,
> 
> On Wed, Jan 17, 2024 at 10:17:27AM +0000, Peter Davis wrote:
> 
> > But why didn't the previous OpenVPN Connect disconnect? I want the previous user to be disconnected.
> 
> 
> I'm not 100% sure about that - I think the server will just pretend that
> the previous client with the same key stops existing, and not send an active
> "go away" packet.
> 
> So the client will stop working, and if you have "keepalive" configured
> (which should be default in the server config, need to check the manpage)
> it will eventually discover "oh, keepalive expired" and disconnect.
> 
> Since this is not a recommended scenario it's somewhat unlikely that the
> developers will spend much time on improving the current behaviour.
> 
> gert
> --
> "If was one thing all people took for granted, was conviction that if you
> feed honest figures into a computer, honest figures come out. Never doubted
> it myself till I met a computer with a sense of humor."
> Robert A. Heinlein, The Moon is a Harsh Mistress
> 
> Gert Doering - Munich, Germany [email protected]

Hi,
Thanks again.
I think you mean "keepalive 10 120" option. Is it true? If this option is removed, will the previous client be disconnected?
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.