[PR #1432] [MERGED] feat: disconnect clients immediately on certificate revocation #416

Closed
opened 2026-11-11 16:41:45 +01:00 by Alvin-Zilverstand · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/angristan/openvpn-install/pull/1432
Author: @angristan
Created: 12/18/2025
Status: ✅ Merged
Merged: 12/18/2025
Merged by: @angristan

Base: master ← Head: feat/management-interface-disconnect


📝 Commits (1)

  • 11ba1e9 feat: disconnect clients immediately on certificate revocation

📊 Changes

5 files changed (+142 additions, -43 deletions)

View changed files

📝 README.md (+2 -1)
📝 openvpn-install.sh (+33 -7)
📝 test/Dockerfile.server (+1 -0)
📝 test/client-entrypoint.sh (+21 -22)
📝 test/server-entrypoint.sh (+85 -13)

📄 Description

Summary

Adds immediate client disconnect when a certificate is revoked, via OpenVPN management interface.

Previously, revoked clients stayed connected until they voluntarily disconnected or the server restarted.

Fixes #1199

Changes

  • Enable management interface (Unix socket at /var/run/openvpn/server.sock)
  • Add disconnectClient() function to send kill command on revoke
  • Add socat dependency for socket communication

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/angristan/openvpn-install/pull/1432 **Author:** [@angristan](https://github.com/angristan) **Created:** 12/18/2025 **Status:** ✅ Merged **Merged:** 12/18/2025 **Merged by:** [@angristan](https://github.com/angristan) **Base:** `master` ← **Head:** `feat/management-interface-disconnect` --- ### 📝 Commits (1) - [`11ba1e9`](https://github.com/angristan/openvpn-install/commit/11ba1e9266cefd1d13eb76554007a5757df8e705) feat: disconnect clients immediately on certificate revocation ### 📊 Changes **5 files changed** (+142 additions, -43 deletions) <details> <summary>View changed files</summary> 📝 `README.md` (+2 -1) 📝 `openvpn-install.sh` (+33 -7) 📝 `test/Dockerfile.server` (+1 -0) 📝 `test/client-entrypoint.sh` (+21 -22) 📝 `test/server-entrypoint.sh` (+85 -13) </details> ### 📄 Description ## Summary Adds immediate client disconnect when a certificate is revoked, via OpenVPN management interface. Previously, revoked clients stayed connected until they voluntarily disconnected or the server restarted. Fixes #1199 ## Changes - Enable management interface (Unix socket at `/var/run/openvpn/server.sock`) - Add `disconnectClient()` function to send `kill` command on revoke - Add `socat` dependency for socket communication --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Alvin-Zilverstand added the pull-request label 2026-11-11 16:41:45 +01:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/openvpn-install#416