Re: Two questions about key generation for clients

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256






Sent with Proton Mail secure email.

On Saturday, January 20th, 2024 at 11:05 PM, tincantech via Openvpn-users <[email protected]> wrote:


> Hi,
> 
> On Saturday, January 20th, 2024 at 6:57 PM, Bo Berglund [email protected] wrote:
> 
> > On Sat, 20 Jan 2024 18:41:17 +0100, Gert Doering [email protected] wrote:
> > 
> > > > Is it possible to notify the previous user via email or SMS when another
> > > > user connects to the server with the same key?
> > > 
> > > Anything can be done via --client-connect / --client-disconnect scripts.
> > 
> > Very interesting, I did not know about this....
> 
> 
> "Anything" is absolutely NOT correct, in this context.
> 
> Certain things may (or may not) be achievable via --client-connect/disconnect.
> 
> While the man page does not make this clear, I am quite certain that duplicate
> client connections are dropped before --client-connect fires.
> 
> Regards
> tct
> --

For posterity:

Server log --verb 4:

<verbatim>

2024-01-21 03:06:59 us=764987 10.1.101.36:33510 [tct.66.c.w10.dan] Peer Connection Initiated with [AF_INET]10.1.101.36:33510
2024-01-21 03:06:59 us=765204 MULTI: new connection by client 'tct.66.c.w10.dan' will cause previous active sessions by this client to be dropped.  Remember to use the --duplicate-cn option if you want multiple clients using the same certificate or username to concurrently connect.
2024-01-21 03:06:59 us=765233 MULTI_sva: pool returned IPv4=10.126.66.121, IPv6=(Not enabled)
2024-01-21 03:06:59 us=765311 OPTIONS IMPORT: reading client specific options from: tuns_12666u/CCD_subnet/tct.66.c.w10.dan
TEST --client-connect script

</verbatim>

'TEST --client-connect script' is the configure --client-connect script output.

Feed the machine.
tct
-- 



-----BEGIN PGP SIGNATURE-----
Version: ProtonMail

wsBzBAEBCAAnBYJlrI2pCZBPl5z2a5C4nRYhBAm8PURno41yecVVVU+XnPZr
kLidAABdtQf8Ddf5p2Y5p9eAvlvK+tjS14GyKs1XXzVs5zFKxPGzxCmwsr1o
815ocEj3WZSQDE23oHz4WaiCPZ3nxEGn8euCDrY3czC7IVHlkBEle8Ev/pfR
WTGDnP/W9QnBdmBPP0trsjKfrg+nVfldCf/OY63Ji3E4a0IiQzAztUMVT6s4
VlZ7Y7qth/r8NVwwguXJRsS/8LOUxKRIBflTh/0HfFhEIMrHq2Xx3MplcHBD
zWup0pFS2Tw02hpnFBZZdE5LX1vWHMYlZnRdf5/1JQsgB4IXghMnDsddjZCl
Pxg8y/6iwPQZpWeztg778RJ4c6zWXkQcJFfmr/mGiGyCGcJQdGcgqw==
=In9O
-----END PGP SIGNATURE-----

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

-----BEGIN PGP PUBLIC KEY BLOCK-----

xsBNBFvwSccBCADOmHEnQlLmOjJRtJL2l53MLwwFTy7XnEps3b1Q0UwWYFCv
L2oNp0nrdGlKKDJq50Y09SR+URYBQmKmY3EmzpyUIKM/rgo1RyubHpMRHbDp
7Jp8LxkffFBVJj/t5VMpD6eMR6aUciQjgRL8NZe6+T7xfXXXwV5hoReZ3jO+
zHi6SR7xTvGXla+MQz6EEpWnlbLvg2ort9KseuVjYrqvRMxcdP0o9cZWJ5ep
JNmgeB6M7+OW08U1SsXtKrpLRcI6yKmV38jhzPr2ZgP9rmrlErR/1iqQQHXY
o8/0DfPyF0mH9ynQIiLE/l+FYu4rsG8ViKlxhXczePzAtLCjiB0a0mRVABEB
AAHNNyJ0aW5jYW50ZWNoQHByb3Rvbm1haWwuY29tIiA8dGluY2FudGVjaEBw
cm90b25tYWlsLmNvbT7CwH8EEAEIACkFAlvwSccGCwkHCAMCCRBPl5z2a5C4
nQQVCAoCAxYCAQIZAQIbAwIeAQAKCRBPl5z2a5C4nQBDB/9ZUo9BOXJR61Nm
02oZ/8aRXO9NnUSFt6GLOWcDNvAs4IJWMDVEQfYanb+421QNd/5d6H1iXF+i
4LDK0M6agC+gsNFJnjPGItvPtj7WyjynZRx8D40PPXigfHYuw2oRu0lr+P1p
1qeUe4NbcqIv8IIvLz2zClYZONgAsQVcNAHi7Z4ortQ2io2BAVj/819JPYMt
tHgY81wS1V7v8GDTZg8oaPhXGfaC4TZFGtZr/bybcqrso35jaQmC54xMbXpF
AUrc3uGVOH+OdG/BW2gcYqpvUFBukXxCUBYHP2NfXhNfzGt9nC1ulNKYeP19
TGlOorBMYIAEHoGxvpbUXfbaNWCUzsBNBFvwSccBCAC9KyVZRS5aMaG5Pi0n
fx8aNos3bYp246MtfaoKBfTQArd+GZW+WnFyJEiSyLdz0rUutyCAdf5lgVH+
WvLvImiGrSrzVpMT2nCS09LqL50Qjz8A7gp5H/hQztZ8iNysGD9NO46OnI75
90dHfCrXjQPSFtFGsTzgDxQIiMuzz9DR7BekKPmuOFIhBe9eEZqbxc8RWeQt
ha7i/DrJTRNK1aOADQFVuV1/Am5ThGPWFM/YJUyTYhMW0yePh45ObWuRQZks
l+aOm4L0KGDDYlm/FQx/EMCubvlzy/zxDdB6nqFih2qZrfymniSOKajG0joT
pZoz/Ez+4fAtg6y0PspNR6idABEBAAHCwGkEGAEIABMFAlvwSccJEE+XnPZr
kLidAhsMAAoJEE+XnPZrkLidRe0H/j5CIFIAucuaiEMkLkNKEAO5s7x47eNy
GPfZslyY+HjzGU0d07MkkGmVkPTVzwqVzNZbny7ZAv1zlW0Uy0yHp1APpyYt
8buUppTBq7d47ogxERYzt/Lc2L5a/VKFNRbhN1/XQmPiz2Ele4tyipbTapcy
+zbyfzAMD13cIdZ13hTsNP0olgBhAqUAUUYpxRlkAHeJ+Dt3NbzHS4KQK538
NJ/l7bXSKsGqoYqJeZ8VNBxwWWUbuG4jjrh43MIRgUZ5WsPUYV6Hx056kMjb
/bYBjI0TEMvH8160uqzFXeHvYyUlq0SinD/Z9ioIe8QdsHGBDUIRYYub1pO8
qrCzRZx0oNA=
=/Dea
-----END PGP PUBLIC KEY BLOCK-----