On Wed, 19 Aug 2015 13:36:47 -0300
Emiliano Vazquez <[email protected]> wrote:

> El 19/08/15 a las 13:28, [email protected] escibió:
> > Hi Emiliano!
> >
> > My script tests if the certificate is installed before try to
> > install a new one. If the certificate is alredy installed it
> > doesn't download again.
> Ok.
> 
> download a certificate over wget is not the most secure way to do
> this. SCP is a better way to do the same and is secure.
> Maybe you can edit /etc/init.d/openvpn and add your custom scripts 
> inside this.

Agreed.  But if you're going to use scp then you presumably
need to install a private key to do the scp.  In which case
you may as well install the certificate instead and have
it be there every boot and not have to bother with
getting something over the network.


Karl <[email protected]>
Free Software:  "You don't pay back, you pay forward."
                 -- Robert A. Heinlein
_______________________________________________
openwrt-users mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users

Reply via email to