openvpn client // enable 2fa

poc | server | client | server-2fa | client-2fa

description

see server-2fa

flavor A) client setup

    vi /etc/openvpn/client.conf

# google authenticator
auth-user-pass
auth-nocache

==> here you simply need to use the TOTP instead of password

flavor B) client setup

    vi /etc/openvpn/client.conf

# google authenticator
auth-user-pass
auth-nocache
reneg-sec 0
static-challenge pin? 1

acceptance

openvpn --config client.conf 

note client certificate is independent from user auth and TOTP – you can easily mix the one with the other for quick testing