Project

General

Profile

Actions

Bug #12238

open

OpenVPN client connect/disconnect scripts are not used in Remote Access (SSL/TLS) mode

Added by Viktor Gurov 4 months ago. Updated about 1 month ago.

Status:
Feedback
Priority:
Normal
Assignee:
Category:
OpenVPN
Target version:
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
22.01
Release Notes:
Default
Affected Version:
Affected Architecture:

Description

If the "Remote Access (SSL/TLS)" server mode is selected,
The resulting openvpn config file doesn't contain client-connect/client-disconnect scripts, which causes:
1) client IP address is not logged (#11935)
2) IPv4/IPv6 states are not killed (https://github.com/pfsense/pfsense/blob/master/src/usr/local/sbin/openvpn.attributes.sh#L74-L77)

${X509_0_CN} can be used for logging purposes, because of {$username} is empty in case of cert authentication

Actions

Also available in: Atom PDF