automatically add reneg-sec 0 to client and server configs when otp is being used to avoid connection resetting every hour. Edit docs to make clear that a more secure cipher needs to be selected to use with otp to avoid the connection being reset every 64 MB of data

This commit is contained in:
Luke
2017-01-24 14:37:48 +00:00
parent 1129eb09bc
commit 3ebc4903d8
3 changed files with 9 additions and 1 deletions

View File

@ -161,6 +161,7 @@ OVPN_EXTRA_CONFIG=''
# Parse arguments
while getopts ":a:e:C:T:r:s:du:cp:n:DNmf:tz2" opt; do
echo $opt
case $opt in
a)
OVPN_AUTH="$OPTARG"
@ -329,6 +330,7 @@ cat $TMP_PUSH_CONFIGFILE >> "$conf"
if [ -n "${OVPN_OTP_AUTH:-}" ]; then
echo -e "\n\n# Enable OTP+PAM for user authentication" >> "$conf"
echo "plugin /usr/lib/openvpn/plugins/openvpn-plugin-auth-pam.so openvpn" >> "$conf"
echo "reneg-sec 0" >> "$conf"
fi
echo -e "\n### Extra Configurations Below" >> "$conf"