On Saturday, 19 January 2019 2:52:00 AM AEDT Gert Doering wrote:
> Hi,
>
> On Fri, Jan 18, 2019 at 05:11:28PM +0300, Erik van Dam via Openvpn-users
wrote:
> > The initial setup works good, but after +/- 15 minutes the connection
wants to re-authenticate. Which i don't want. It goes a bit like this:
> re-authentication with 2FA is somewhat annoying ("it does not work").
>
> Approach 1: increase reneg-timeout, which requires proper ciphers
> (AES, not default = blowfish).
>
> Approach 2: work with auth tokens, but this is somewhat "work in progress"
> on the openvpn side (you need to use fairly recent openvpn versions and
> some sort of token-aware authenticaiton plugin).With some shameless self-promotion, I wrote a plugin using approach 2 mentioned above for using YubiOTP via a yubikey for authentication with openvpn. Link: https://www.crc.id.au/openvpn-otp-with-a-yubikey/ It works fine and has been very stable for many months. -- Steven Haigh 📧 [email protected] 💻 https://www.crc.id.au 📞 +61 (3) 9001 6090 📱 0412 935 897
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
