Create OpenVPN users

[dvyu]

Hi!

We are trying to create several, actually a lot of OpenVPN users.
I found methods in swagger and first of all created user certificate by query

curl -X 'POST' \
  "http://$HOST/api/v1/system/certificate" \
  -u $USER:$PASSWORD \
  -H 'accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{
  "active": false,
  "altnames": [
    {}
  ],
  "caref": "5badcff20b055",
  "crt": "$CA_ROOT_CRT",
  "descr": "test_user",
  "digest_alg": "sha1",
  "dn_city": "City",
  "dn_commonname": "test_user",
  "dn_country": "RU",
  "dn_organization": "Company",
  "dn_organizationalunit": "Company",
  "dn_state": "Company",
  "ecname": "ecname",
  "keylen": 1024,
  "keytype": "RSA",
  "lifetime": 3650,
  "method": "import",
  "prv": "$CA_ROOT_KEY",
  "type": "server"
}'

Then I created user

curl -X 'POST' \
  "http://$HOST/api/v1/user" \
  -u $USER:$PASSWORD \
  -H 'accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{
  "authorizedkeys": "",
  "cert": [ "64072b5be702d" ],
  "descr": "",
  "disabled": false,
  "expires": "",
  "ipsecpsk": "",
  "password": "string",
  "priv": [],
  "username": "test_user"
}'

And OpenVPN override

curl -X 'POST' \
  'http://10.30.218.2/api/v1/services/openvpn/csc' \
  -u $USER:$PASSWORD \
  -H 'accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{
  "block": false,
  "common_name": "test_user",
  "custom_options": "test_user",
  "description": "test_user",
  "disable": false,
  "dns_domain": "",
  "dns_servers": "",
  "local_network": "192.168.1.1",
  "local_networkv6": "",
  "netbios_enable": false,
  "netbios_node_type": "b",
  "netbios_scope": "",
  "ntp_servers": "",
  "prevent_server_definitions": false,
  "redirect_gateway": false,
  "remote_network": "",
  "remote_networkv6": "",
  "remove_server_routes": false,
  "server_list": "string",
  "tunnel_network": "10.0.0.2/24",
  "tunnel_networkv6": "",
  "wins_servers": ""
}'

Is it right I used ID of CA in caref and base64 encoded CA root certificate and CA private key at crt and prv fields then create user certificate?
And ID of newly created certificate in cert field when create user?

I suppose I did something wrong when I created user certificate, because I have self-signed certificate instead of issued by MY CA NAME and CN=MY CA NAME instead of CN=test_user

Thanks for your help!

[leandrogbreve]

Hi @dvyu ,

Did you have any success on it? I'll go down the same road next days.