[GH-ISSUE #3] Compatible with user key files #1

Closed
opened 2026-02-25 22:30:43 +03:00 by kerem · 3 comments
Owner

Originally created by @1337sup3rh4x0r on GitHub (May 23, 2015).
Original GitHub issue: https://github.com/evgeny-gridasov/openvpn-otp/issues/3

I managed to install this plugin to my server but now I cannot log in while it is enabled. Could it be that otp does not work alongside with user key files?

Or maybe I am doing something wrong with the google auth key.
I understand from the readme, that in the /etc/ppp/otp-secrets file the key needs to be put in base32 format.
What about in the google auth app? base32 or plain?
Also, does the key need to have a specific length?

Originally created by @1337sup3rh4x0r on GitHub (May 23, 2015). Original GitHub issue: https://github.com/evgeny-gridasov/openvpn-otp/issues/3 I managed to install this plugin to my server but now I cannot log in while it is enabled. Could it be that otp does not work alongside with user key files? Or maybe I am doing something wrong with the google auth key. I understand from the readme, that in the /etc/ppp/otp-secrets file the key needs to be put in base32 format. What about in the google auth app? base32 or plain? Also, does the key need to have a specific length?
kerem closed this issue 2026-02-25 22:30:43 +03:00
Author
Owner

@evgeny-gridasov commented on GitHub (May 24, 2015):

I think when you switch it to username/password mode it stops working with .key files.
base32 should go both in google authenticator and openvpn-otp
The length is standard google auth key length which is 16 characters of base32
Use google-authenticator cli tool to generate them and then scan generated QR code with the mobile phone app.

<!-- gh-comment-id:104997498 --> @evgeny-gridasov commented on GitHub (May 24, 2015): I think when you switch it to username/password mode it stops working with .key files. base32 should go both in google authenticator and openvpn-otp The length is standard google auth key length which is 16 characters of base32 Use google-authenticator cli tool to generate them and then scan generated QR code with the mobile phone app.
Author
Owner

@1337sup3rh4x0r commented on GitHub (May 24, 2015):

Thank you for clearifying! Maybe it would help others to get startet if this was in the Readme?

<!-- gh-comment-id:105001609 --> @1337sup3rh4x0r commented on GitHub (May 24, 2015): Thank you for clearifying! Maybe it would help others to get startet if this was in the Readme?
Author
Owner

@maxadamo commented on GitHub (Oct 21, 2015):

what do you mean by "key file"? I use ca.crt + client.crt + client.key + OTP, and everything is working like a charm.

<!-- gh-comment-id:149966472 --> @maxadamo commented on GitHub (Oct 21, 2015): what do you mean by "key file"? I use ca.crt + client.crt + client.key + OTP, and everything is working like a charm.
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/openvpn-otp#1
No description provided.