diff --git a/etc/inc/openvpn.inc b/etc/inc/openvpn.inc index ca463e804f..fe8a4f51c7 100644 --- a/etc/inc/openvpn.inc +++ b/etc/inc/openvpn.inc @@ -431,6 +431,8 @@ function openvpn_reconfigure($mode,& $settings) { $conf .= "client-to-client\n"; break; } + if (isset($settings['duplicate_cn'])) + $conf .= "duplicate-cn\n"; } // client specific settings diff --git a/usr/local/www/vpn_openvpn_server.php b/usr/local/www/vpn_openvpn_server.php index 9d7c00d8ed..002702cfea 100644 --- a/usr/local/www/vpn_openvpn_server.php +++ b/usr/local/www/vpn_openvpn_server.php @@ -176,6 +176,8 @@ if($_GET['act']=="edit"){ // just in case the modes switch $pconfig['autokey_enable'] = "yes"; $pconfig['autotls_enable'] = "yes"; + + $pconfig['duplicate_cn'] = isset($a_server[$id]['duplicate_cn']); } } @@ -364,7 +366,10 @@ if ($_POST) { if ($pconfig['dns_server_enable']) $server['nbdd_server1'] = $pconfig['nbdd_server1']; } - + + if ($_POST['duplicate_cn'] == "yes") + $server['duplicate_cn'] = true; + if (isset($id) && $a_server[$id]) $a_server[$id] = $server; else @@ -1012,6 +1017,24 @@ if ($savemsg) +
| + + /> + | +
+
+ =gettext("Allow multiple concurrent connections from clients using the same Common Name. NOTE: This is not generally recommended, but may be needed for some scenarios."); ?> + + |
+