OPNsense Forum

Archive => 17.7 Legacy Series => Topic started by: 0xDEADC0DE on September 21, 2017, 12:48:15 am

Title: [SOLVED] OpenVPN: --ns-cert-type is DEPRECATED
Post by: 0xDEADC0DE on September 21, 2017, 12:48:15 am

When I connect with OpenVPN I get this warning:

Code: [Select]

WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.

pfSense fixed it already. Perhaps you can include the code.
https://forum.pfsense.org/index.php?topic=129676.0

I get many requests from my users about this warning. Currently I fixed it by manually
editing the config file.

Title: Re: OpenVPN: --ns-cert-type is DEPRECATED
Post by: jorgevisentini on September 21, 2017, 10:05:56 pm

Yes, I've been manually editing the ovpn file for some time.

At this notice it is because in the future this parameter will be changed in OpenVPN.

I believe development staff just need to change this parameter to generate automatically.

Title: Re: OpenVPN: --ns-cert-type is DEPRECATED
Post by: franco on September 22, 2017, 12:17:15 am

Looks like one of those perfect times to be contributing small fixes to OPNsense. :D

But now here it is... https://github.com/opnsense/core/commit/73abc7c3d

# opnsense-patch 73abc7c3d

If you tell us that works it'll be in 17.7.4. But we still have time till 2.5 is out.


Cheers,
Franco

Title: Re: OpenVPN: --ns-cert-type is DEPRECATED
Post by: jorgevisentini on September 22, 2017, 09:49:07 pm

Hi Franco, it work!

Sorry for I dont contribute for project but I dont know php very much and I dont know the project and also I dont know use git lol  :'(

I would very much like to help in any way possible.

Title: Re: OpenVPN: --ns-cert-type is DEPRECATED
Post by: franco on September 23, 2017, 09:05:26 am

Hi,

No worries, I just meant the change doesn't really require coding so is a good entry level challenge for contribution.

Reporting and testing is just as important. Thank you for this. I've added the patch for 17.7.4 and will mark this solved. :)


Cheers,
Franco

Title: Re: [SOLVED] OpenVPN: --ns-cert-type is DEPRECATED
Post by: 0xDEADC0DE on September 25, 2017, 10:33:32 pm

Thanks franco.  👍

Title: Re: [SOLVED] OpenVPN: --ns-cert-type is DEPRECATED
Post by: franco on September 25, 2017, 11:11:35 pm

Thanks for the feedback, 17.7.4 hits tomorrow and we're all set as previously discussed.


Cheers,
Franco