Ask users to enter the p12 password manually (#697)

7 years ago · ee7264f26e
parent 6b803e069f
commit ee7264f26e
2 changed files with 1 additions and 3 deletions
--- a/roles/vpn/templates/client_windows.ps1.j2
+++ b/roles/vpn/templates/client_windows.ps1.j2
@ -1,6 +1,6 @@

 function AddAlgoVPN {
-  certutil -f -p {{ easyrsa_p12_export_password }} -importpfx .\{{ item }}.p12
+  certutil -f -importpfx .\{{ item }}.p12
  Add-VpnConnection -name "Algo VPN {{ IP_subject_alt_name }} IKEv2" -ServerAddress "{{ IP_subject_alt_name }}" -TunnelType IKEv2 -AuthenticationMethod MachineCertificate -EncryptionLevel Required
  Set-VpnConnectionIPsecConfiguration -ConnectionName "Algo VPN {{ IP_subject_alt_name }} IKEv2" -AuthenticationTransformConstants GCMAES128 -CipherTransformConstants GCMAES128 -EncryptionMethod AES128 -IntegrityCheckMethod SHA384 -DHGroup ECP256 -PfsGroup ECP256  -Force
 }
--- a/roles/vpn/templates/mobileconfig.j2
+++ b/roles/vpn/templates/mobileconfig.j2
@ -146,8 +146,6 @@
            <string>IKEv2</string>
        </dict>
        <dict>
-            <key>Password</key>
-            <string>{{ easyrsa_p12_export_password }}</string>
            <key>PayloadCertificateFileName</key>
            <string>{{ item.0 }}.p12</string>
            <key>PayloadContent</key>