openVPN username/password authentication

Hello there.

I know that the RouterOS implementation of openVPN server requires username-password as authentication method, regardless if certificates are used (probably the “–auth-user-pass-verify” directive).

Is this really necessary? I believe it could be easy to let the user decide if he wants to use username/pass or “just” the certificates. I’ve come across two cases where the openvpn client is not compiled with the “–enable-password-save” configure option, so it cannot use the “–auth-user-pass [filename]” (depending only on certificates).

It would be greatly appreciated if you would consider this in an update of RouterOS, it would make life simpler :wink:

…actually, the “–enable-password-save” option is not enabled in any pre-compiled version of openVPN (it was considered a security flaw) so not being able to use the openVPN server of RouterOS should be a very common situation :confused: