From 4f04e374e024c87496a6d8556975ff191fef461a Mon Sep 17 00:00:00 2001 From: jim-p Date: Thu, 11 Jul 2013 09:55:54 -0400 Subject: When we don't need a client cert, add a line to tell the client that we don't need a client cert, or else the OpenVPN Connect app will try to force the user to pick one. --- config/openvpn-client-export/openvpn-client-export.inc | 3 +++ 1 file changed, 3 insertions(+) (limited to 'config') diff --git a/config/openvpn-client-export/openvpn-client-export.inc b/config/openvpn-client-export/openvpn-client-export.inc index 06a0928c..d88d988f 100755 --- a/config/openvpn-client-export/openvpn-client-export.inc +++ b/config/openvpn-client-export/openvpn-client-export.inc @@ -383,6 +383,9 @@ function openvpn_client_export_config($srvid, $usrid, $crtid, $useaddr, $quotese $conf .= "{$nl}" . trim(base64_decode($cert['crt'])) . "{$nl}{$nl}"; // Inline Key $conf .= "{$nl}" . trim(base64_decode($cert['prv'])) . "{$nl}{$nl}"; + } else { + // Work around OpenVPN Connect assuming you have a client cert even when you don't need one + $conf .= "setenv CLIENT_CERT 0{$nl}"; } // Inline TLS if ($settings['tls']) { -- cgit v1.2.3