OpenVPN verify: Fix login for RW clients with >= 2 spaces in name.
[people/teissler/ipfire-2.x.git] / config / ovpn / verify
1 #!/usr/bin/perl
2 ############################################################################
3 # #
4 # This file is part of the IPFire Firewall. #
5 # #
6 # IPFire is free software; you can redistribute it and/or modify #
7 # it under the terms of the GNU General Public License as published by #
8 # the Free Software Foundation; either version 2 of the License, or #
9 # (at your option) any later version. #
10 # #
11 # IPFire is distributed in the hope that it will be useful, #
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14 # GNU General Public License for more details. #
15 # #
16 # You should have received a copy of the GNU General Public License #
17 # along with IPFire; if not, write to the Free Software #
18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA #
19 # #
20 # Copyright (C) 2013 IPFire Team <info@ipfire.org>. #
21 # #
22 ############################################################################
23
24 require '/var/ipfire/general-functions.pl';
25
26 my $DEPTH = $ARGV[0];
27 my $CN = $ARGV[1];
28
29 # Exit immediately for every certificate depth other than 0.
30 exit 0 unless ($DEPTH eq "0");
31
32 # Strip the CN from the X509 identifier.
33 $CN =~ /\/CN=(.*)$/i;
34 $CN = $1;
35
36 my %confighash = ();
37 if (-f "${General::swroot}/ovpn/ovpnconfig"){
38 &General::readhasharray("${General::swroot}/ovpn/ovpnconfig", \%confighash);
39 foreach my $key (keys %confighash) {
40 my $cn = $confighash{$key}[2];
41
42 # Skip disabled connections.
43 next unless ($confighash{$key}[0] eq "on");
44
45 # Skip non-roadwarrior connections.
46 next unless ($confighash{$key}[3] eq "host");
47
48 # Search for a matching CN.
49 exit 0 if ($cn eq $CN);
50
51 # Compatibility code for incorrectly saved CNs.
52 $cn =~ s/\ /_/g;
53 exit 0 if ($cn eq $CN);
54 }
55 }
56
57 # Return an error if ovpnconfig could not be found.
58 exit 1;