openwisp / openwisp-controller

Network and WiFi controller: provisioning, configuration management and updates, (pull via openwisp-config or push via SSH), x509 PKI management and more. Mainly OpenWRT, but designed to work also on other systems.
https://openwisp.io/docs/dev/controller/
Other
556 stars 180 forks source link

[feature] Option to set x509 extensions on the Automatic Tunnel Provisioning certificates #825

Open kosli opened 9 months ago

kosli commented 9 months ago

As stated in #743 it would be good to have the possibility to set x509 extensions on the automatic tunnel provisioning certificates.

e.g. I use the certificate not just as client certificates to connect to the openwisp server but also as server certificates for clients connecting to the openwrt router devices. -> and to "harden" the openvpn connection i use remote-cert-tls server option (see the OpenVPN manual)

Thanks