Re: Two questions about key generation for clients

Gert Doering <[email protected]> Wed, 17 Jan 2024 12:10:11 +0100

Newsgroups	gmane.network.openvpn.user
Message-ID	<[email protected]>

Hi,

On Wed, Jan 17, 2024 at 11:05:54AM +0000, Peter Davis wrote:
> I think you mean "keepalive 10 120" option. Is it true? 

Yes.

> If this option is removed, will the previous client be disconnected?

No.

Please read what I wrote, then read it again.

There is no server functionality to actively disconnect a client on
duplicate certificates - the server will *forget* that the previous client
ever existed, and that's all it does.  So at some point the client needs
to notice "the server is no longer talking to me" and quit - which is
done by regular openvpn-ping packets (= keepalive option).

gert

-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             [email protected]

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

signature.asc (application/pgp-signature, 630 B)