Local OpenVPN management interface should use a password

dpb587 / ssoca

SSO for services that use CA-based authentication.

https://dpb587.github.io/ssoca/

MIT License

10 stars 2 forks source link

Local OpenVPN management interface should use a password #14

Closed dpb587 closed 5 years ago

dpb587 commented 5 years ago

Currently the management interface is started without a required password between openvpn and ssoca. The openvpn process warns with the following.

$ ssoca openvpn exec
Sat Mar  9 13:59:55 2019 WARNING: Using --management on a TCP port WITHOUT passwords is STRONGLY discouraged and considered insecure

Consider using a generated password or a socket.

dpb587 commented 5 years ago

Fixed via https://github.com/dpb587/ssoca/commit/82ce1256a9337700c2930c49f645920ac3243491 and verified on dev build.