I have an OpenVPN server which authenticates to an Active Directory and asks therefore each user for a username and passphrase.
On top of that it also requires each user to have a client certificate and client key (+ server ca.crt).
I would like that each user must login with their AD username and passphrase and that all clients shares the same client certificate and client key.
The reason I want a shared client certificate and key is for ease of management and it protects the network from someone brute forcing a password.
One way would be to just create one client like so
. /etc/openvpn/easy-rsa/2.0/build-key client1
and give this to each user.
Is that the correct way under these conditions? Or should the client certificate and key be created in a special way?