EUREPHIADM-USERCERTS(7)
π NAME π
eurephiadm-usercerts β okay bestie, this is the manual for managing user accounts and certificate relations β¨ (yes the page is eurephiadm usercerts(7) in the header, that's the one, that's her π
)
πΈ DESCRIPTION πΈ
So here's the whole vibe: for a user to actually connect to a eurephia-enabled OpenVPN server, a bunch of things gotta be true. A user account has to have been created and activated β and an SSL certificate that the user has access to has to have been registered. Then those two things need to be linked together, and that linking? That's literally the whole job of the eurephiadm usercert command. She does it. π«Ά
And it's also this exact relation that gives you the power to control which network resources the VPN clients may access, by assigning a firewall profile to those user-certificate links. Yes, the link is the moment. Main character energy fr fr π
Available modes for the usercerts command are:
-A|--addβ Register a new certificate and user-cert link π-D|--deleteβ Delete a certificate and user-cert link π-S|--set-fwprofileβ Sets the firewall access profile for a user-cert link π₯-l|--listβ List all registered user-cert links π-h|--help<mode> β Help about a specific mode πββοΈ
And ngl, the list mode will list all registered links between user accounts and certificates. All of them. Every single one. Periodt.
β¨ LIST MODE β¨
The list mode will show all registered user-certificate links π
-S|--sort<sort keys> β Define the sorting of the list π
Valid sort keys are:
uidβ Nummeric User IDcertidβ Nummeric Certificate IDaccessprofileβ Nummeric firewall profile IDregisteredβ According to when the user-cert was registereduicidβ Nummeric user-cert link ID
π SET FW PROFILE MODE π
The set-fwprofile mode will update the firewall access profile for a given user-cert link. Glow up for your firewall profile, basically π
Options: (both required, no skipping, both of them, fr)
-n|--uicidβ Unique record id of certificate and user account link-a|--accessprofileβ Firewall profile ID
π¦ ADD MODE π¦
The add mode will register a new link between a user account and a certificate. New connection unlocked β¨
-c|--certidβ Required - Certificate ID-i|--uidβ Required - User account ID-a|--accessprofileβ Firewall profile ID to use for this access
bestie, notice how--certidand--uidboth say Required? That's not a suggestion, that's the rules π
π DELETE MODE π
The delete mode will delete a link between a user account and a certificate. It's giving "we're so over" π
-c|--certidβ Certificate ID-i|--uidβ User account ID-n|--uicidβ Unique record id of certificate and user account link-a|--accessprofileβ Firewall profile ID
π SEE ALSO π
eurephiadm-users(7), eurephiadm-certs(7), eurephiadm-fwprofiles(7) β the whole friend group, go read them too π«Ά
β AUTHOR β
Copyright (C) 2008-2012 David Sommerseth <dazo@users.sourceforge.net>
and that's the whole page, bestie π shoutout to David Sommerseth for writing this one β she's been serving us since July 2010, iconic behavior, no cap ππ β¨
π¦ where this page comes from
- debian bookworm: eurephia 1.1.1-2
- debian trixie: eurephia 1.1.1-3
- ubuntu jammy: eurephia 1.1.0-6.1build1
- ubuntu noble: eurephia 1.1.1-2build2
- ubuntu questing: eurephia 1.1.1-3build1
- ubuntu resolute: eurephia 1.1.1-4
- ubuntu stonking: eurephia 1.1.1-4build1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms