Summary: | Creating an OpenVPN connection with a duplicate CN fails, but certificate is still created | ||
---|---|---|---|
Product: | IPFire | Reporter: | Dominik Wnek <dominalien> |
Component: | --- | Assignee: | Adolf Belka <adolf.belka> |
Status: | CLOSED FIXED | QA Contact: | |
Severity: | Minor Usability | ||
Priority: | - Unknown - | CC: | adolf.belka, michael.tremer |
Version: | 2 | ||
Hardware: | unspecified | ||
OS: | Unspecified |
Description
Dominik Wnek
2023-10-21 20:05:24 UTC
Component for IPFire-2.x should always be --- Specific component names are selected only for IPFire-3.x https://wiki.ipfire.org/devel/bugzilla/workflow#assigned Adolf is this one for you, as you are already doing a deep dive into OpenVPN at the moment? (In reply to Michael Tremer from comment #2) > Adolf is this one for you, as you are already doing a deep dive into OpenVPN > at the moment? Yes, I was planning on picking this up later in November. Sorry it has taken a bit longer than I had hoped to be able to get around to this but I am now starting to work on it. I have followed the steps to reproduce and can confirm the issue as raised in this bug. I will now look at the code and find what changes are needed to prevent the issue. Patch set submitted to the dev mailing list and to patchwork. https://lists.ipfire.org/hyperkitty/list/development@lists.ipfire.org/thread/BQBGD345J7LT27AAHUVKSCIGG2XDMOWQ/ https://patchwork.ipfire.org/project/ipfire/list/?series=4170 Patch has been merged into next (Will be CU185) https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=f433fdcd90cb406f1095e6c3d2fa6af7cd85efb3 https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=c790899f7383dae7f734a44c1570da1c9246b778 CU185 Testing has been released. https://www.ipfire.org/blog/ipfire-2-29-core-update-185-is-available-for-testing Evaluated the creation of an openvpn connection with a duplicate CN. The creation fails with an error message and nothing is created in the directory. This verifies the bug fix to be working. |