Project

General

Profile

Actions
Copy link

Bug #12238

closed

OpenVPN client connect/disconnect scripts are not used in Remote Access (SSL/TLS) mode

Added by Viktor Gurov over 3 years ago. Updated almost 3 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Viktor Gurov
Category:
OpenVPN
Target version:
2.6.0
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
22.01
Release Notes:
Default
Affected Version:
Affected Architecture:

Description

If the "Remote Access (SSL/TLS)" server mode is selected,
The resulting openvpn config file doesn't contain client-connect/client-disconnect scripts, which causes:
1) client IP address is not logged (#11935)
2) IPv4/IPv6 states are not killed (https://github.com/pfsense/pfsense/blob/master/src/usr/local/sbin/openvpn.attributes.sh#L74-L77)

${X509_0_CN} can be used for logging purposes, because of {$username} is empty in case of cert authentication

Actions
Copy link
 #2

Updated by Jim Pingle over 3 years ago

  • Status changed from New to Pull Request Review
  • Target version set to 2.6.0
  • Plus Target Version set to 21.09
Actions
Copy link
 #3

Updated by Viktor Gurov over 3 years ago

  • Status changed from Pull Request Review to Feedback
  • % Done changed from 0 to 100
Actions
Copy link
 #4

Updated by Viktor Gurov over 3 years ago

  • Assignee set to Viktor Gurov
Actions
Copy link
 #5

Updated by Jim Pingle about 3 years ago

  • Subject changed from client-connect/client-disconnect scripts are not used in Remote Access (SSL/TLS) mode to OpenVPN client connect/disconnect scripts are not used in Remote Access (SSL/TLS) mode

Updating subject for release notes.

Actions
Copy link
 #6

Updated by Jim Pingle about 3 years ago

  • Plus Target Version changed from 21.09 to 22.01
Actions
Copy link
 #7

Updated by Christopher Cope almost 3 years ago

Tested on

2.6.0-RELEASE (amd64)
built on Mon Jan 31 19:57:53 UTC 2022
FreeBSD 12.3-STABLE

client-connect / client-disconnect scripts are in the configuration when using Remote Access (SSL/TLS) mode, as expected. This can be marked as resolved.

Actions
Copy link
 #8

Updated by Christopher Cope almost 3 years ago

  • Status changed from Feedback to Resolved
Actions
Copy link

Also available in: Atom PDF