openvpn client // enable 2fa

poc | server | client | server-2fa | client-2fa

descriptiondescription

see server-2fa

flavor A) client setupflavor A) client setup

vi /etc/openvpn/client.conf

# google authenticator
auth-user-pass
auth-nocache

==> here you simply need to use the TOTP instead of password

flavor B) client setupflavor B) client setup

vi /etc/openvpn/client.conf

# google authenticator
auth-user-pass
auth-nocache
reneg-sec 0
static-challenge pin? 1

acceptanceacceptance

openvpn --config client.conf 

note client certificate is independent from user auth and TOTP – you can easily mix the one with the other for quick testing