build_key-pass.sh: set default user for VPN credentials to save to 'chris'.

README.error

@@ -1,3 +1,17 @@
+# ---
+# Error: Option conflict: 'build-client-full' does not support setting an external commonName
+# ---
+
+# workarround:
+#
+#     see: https://github.com/OpenVPN/easy-rsa/issues/717
+#
+#     EASYRSA_REQ_CN should probably be removed from vars.example.
+
+fqp_path_to_vars="/etc/openvpn/server/gw-ckubu/easy-rsa/vars"
+
+perl -i -n -p -e "s/^\s*(set_var\s+EASYRSA_REQ_CN.*)/#####\1/g" ${fqp_path_to_vars}
+
 # ---
 # Error: AEAD Decrypt error: bad packet ID
 # ---

build_key-pass.sh

@@ -7,6 +7,8 @@ _date="$(date +%Y-%m-%d-%H%M)"
 
 key_names_reserverd="ta ca server"
 
+DEFAULT_USER_TO_COPY_CREDENTIALS=chris
+
 #---------------------------------------
 #-----------------------------
 # Some functions
@@ -964,6 +966,20 @@ comp-lzo yes
 EOF
 fi
 
+if [[ -n ${DNS_SERVER} ]] && [[ "${DNS_SERVER,,}" != "none" ]]  ; then
+   cat <<EOF >> ${_client_openvpn_connector_v3} 2>> "$log_file"
+
+# Pusch Nameserver Settinggs..
+dhcp-option DNS ${DNS_SERVER}
+EOF
+
+   if [[ -n ${SEARCH_DOMAINS} ]] && [[ "${SEARCH_DOMAINS,}" != "none" ]]  ; then
+      cat <<EOF >> ${_client_openvpn_connector_v3} 2>> "$log_file"
+dhcp-option DOMAIN ${SEARCH_DOMAINS}
+EOF
+   fi
+fi
+
 cat <<EOF >> ${_client_openvpn_connector_v3} 2>> "$log_file"
 
 # --auth-nocache

create_key_config.sh

@@ -226,7 +226,6 @@ fi
 [[ -n "$OPENVPN_SERVER" ]] || fatal "OpenVPN Server (parameter OPENVPN_SERVER ) not present!"
 [[ -n "$SERVER_PORT" ]] || fatal "Server Port (parameter SERVER_PORT ) not present!"
 
-
 if [[ -z "$LZO_COMPRESSION" ]]; then
    LZO_COMPRESSION=false
 elif [[ "${LZO_COMPRESSION,,}" = "yes" ]] ; then
@@ -906,6 +905,20 @@ comp-lzo yes
 EOF
 fi
 
+if [[ -n ${DNS_SERVER} ]] && [[ "${DNS_SERVER,,}" != "none" ]]  ; then
+   cat <<EOF >> ${_client_openvpn_connector_v3} 2>> "$log_file"
+
+# Pusch Nameserver Settinggs..
+dhcp-option DNS ${DNS_SERVER}
+EOF
+
+   if [[ -n ${SEARCH_DOMAINS} ]] && [[ "${SEARCH_DOMAINS,}" != "none" ]]  ; then
+      cat <<EOF >> ${_client_openvpn_connector_v3} 2>> "$log_file"
+dhcp-option DOMAIN ${SEARCH_DOMAINS}
+EOF
+   fi
+fi
+
 cat <<EOF >> ${_client_openvpn_connector_v3} 2>> "$log_file"
 
 # --auth-nocache