From: Joshua Branson <jbranso@dismail.de>
To: 39660@debbugs.gnu.org
Subject: bug#39660: (no subject)
Date: Sun, 23 Feb 2020 14:33:28 -0500 [thread overview]
Message-ID: <86k14d9jzr.fsf@dismail.de> (raw)
In-Reply-To: <86pnec9cs5.fsf@dismail.de>
>>
>>- [ ] "persist-key"
>>- [ ] "persist-tun"
>We already have both of them. Are they not documented? They should be
>persist-key? and persist-tun? respectively.
That was my mistake. Please ignore that. They are documented sir.
(sorry Military school).
>>- [ ] "remote-random"
>>- [ ] "pull"
>>- [X] "comp-lzo no"
>>- [ ] "tls-client" does tls-auth provide this option???
>tls-auth and tls-client are different options. tls-client replaces the client
>directive we currently generate for all openvpn-client-configuration.
When I look at my currently generated openvpn configuration file I see:
#+BEGIN_SRC
joshua@dobby ~/prog/guile/guix-config$ cat /gnu/store/nm4dvmsffrghdxjlqj712qhrv6w4fd4m-openvpn.conf
client
proto udp
dev tun
ca /home/joshua/prog/guile/guix-config/vpn/ca2.crt
cert /home/joshua/prog/guile/guix-config/vpn/client.crt
key /home/joshua/prog/guile/guix-config/vpn/client.key
persist-key
persist-tun
fast-io
verb 3
auth-user-pass /home/joshua/prog/guile/guix-config/vpn/login.conf
remote-cert-tls server
nobind
resolv-retry infinite
remote asecretremote.com 1195
#+END_SRC
I do not see the "tls-client" option, but my working vpn client configuration file has "tls-client" in it.
My current vpn configuration is:
(openvpn-client-service
#:config
(let ([base-dir "/home/joshua/prog/guile/guix-config/vpn/"])
(openvpn-client-configuration
(auth-user-pass (string-append base-dir "login.conf"))
(ca (string-append base-dir "ca2.crt"))
(cert (string-append base-dir "client.crt"))
(key (string-append base-dir "client.key"))
;; the expressvpn file I use disables lzo compression
(comp-lzo? #f)
(fast-io? #t)
(remote
(list
(openvpn-remote-configuration
(name "asecretremote.com")
(port 1195)))))))
Also, I can confirm that your auth-user-pass does work.
Thanks,
Joshua
prev parent reply other threads:[~2020-02-23 19:34 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-02-18 14:43 bug#39660: openvpn-client-service does not support auth-user-pass Joshua Branson via Bug reports for GNU Guix
2020-02-19 3:14 ` Julien Lepiller
2020-02-21 17:10 ` Joshua Branson via Bug reports for GNU Guix
2020-02-21 17:27 ` Julien Lepiller
2020-02-23 19:33 ` Joshua Branson [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=86k14d9jzr.fsf@dismail.de \
--to=jbranso@dismail.de \
--cc=39660@debbugs.gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this external index
https://git.savannah.gnu.org/cgit/guix.git
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.