cloudposse / terraform-aws-ec2-client-vpn

https://cloudposse.com/accelerate
Apache License 2.0
44 stars 27 forks source link

Multiple client certificates #89

Open vdmkenny opened 10 months ago

vdmkenny commented 10 months ago

Describe the Feature

Support a list of common names to creating many client certificates.

Expected Behavior

Only a single common name

Use Case

I have a number of different clients which I would like to connect to the same endpoint, but use a different certificate. It's likely I will have to revoke a certificate to deny access, and I don't want to impact all users.

Describe Ideal Solution

the field root_common_name could take a list, or a new parameter root_common_names could be introduced.

Alternatives Considered

Multiple VPN endpoints is possible, but very clunky as it need a /22 client cidr for a single client, and unique CA and server certs every time.

Additional Context

https://repost.aws/knowledge-center/client-vpn-multiple-users-same-endpoint