Don't remove user certs

This commit is contained in:
Bob Mottram 2017-09-26 12:19:06 +01:00
parent 193f5aa20c
commit 8434e38c9e
2 changed files with 2 additions and 3 deletions

View File

@ -218,7 +218,8 @@ function create_user_vpn_key {
chown $username:$username $user_vpn_cert_file
rm /etc/openvpn/easy-rsa/keys/$username.crt
#rm /etc/openvpn/easy-rsa/keys/$username.crt
#rm /etc/openvpn/easy-rsa/keys/$username.csr
shred -zu /etc/openvpn/easy-rsa/keys/$username.key
echo $"VPN key created at $user_vpn_cert_file"

View File

@ -111,7 +111,6 @@ function enable_ipv6 {
}
function firewall_disable_vpn {
iptables -D INPUT -p tcp --dport 1194 -j ACCEPT
iptables -D INPUT -p udp --dport 1194 -j ACCEPT
iptables -D INPUT -i tun+ -j ACCEPT
iptables -D FORWARD -i tun+ -j ACCEPT
@ -125,7 +124,6 @@ function firewall_disable_vpn {
}
function firewall_enable_vpn {
iptables -A INPUT -p tcp --dport 1194 -j ACCEPT
iptables -A INPUT -p udp --dport 1194 -j ACCEPT
iptables -A INPUT -i tun+ -j ACCEPT
iptables -A FORWARD -i tun+ -j ACCEPT