If we have some OpenVPN interfaces that use the same certificates, migration to 1.4 creates its certificate for each interface.
The result is: instead of one certificate in the configuration, we have many identical certificates.
For instance:
Config of 1.3 version:
openvpn vtun5 {
....
tls {
ca-cert-file /config/auth/ca.crt
cert-file /config/auth/server.crt
key-file /config/auth/server.key
role active
}
}
openvpn vtun6 {
..........
tls {
ca-cert-file /config/auth/ca.crt
cert-file /config/auth/server.crt
key-file /config/auth/server.key
role active
}
}After migration
Config of 1.4 version:
openvpn vtun5 {
..........
tls {
ca-certificate "openvpn_vtun5_1"
certificate "openvpn_vtun5"
}
}
openvpn vtun6 {
...........
tls {
ca-certificate "openvpn_vtun6_1"
certificate "openvpn_vtun6"
role "active"
}
}If we have 10 interfaces, we get 10 identical CA certificates and 10 identical Server certificates.