Openconnect server certifcate auth

[shockedquartz]

Hello everyone.
Has anyone ever set up openconnect server (ocserv-main) on LEDE/OpenWRT using certificate authentication?

Seems that every-time I enable cert auth, the app crashes.

root@LEDE:/etc/ocserv# grep 'auth =' ocserv.conf.template
auth = "certificate"
#auth = "pam"
#auth = "pam[gid-min=1000]"
auth = "|AUTH|"

Sun May 27 12:01:22 2018 daemon.info procd: Instance ocserv::instance1 s in a crash loop 6 crashes, 0 seconds since last crash

Login only auth works fine.

The only info I've found is this:https://wiki.openwrt.org/doc/howto/openconnect-setup (no cert info at all)
and this https://ocserv.gitlab.io/www/manual.html which says how to create keys but not how to use them No mention of Router OS usage.

Anyone have any experience with this?

[yorksun]

Yes, I have exactly the same crash. Haven't figured out yet.

[yorksun]

I made it work! I enabled "cert-user-oid = 2.5.4.3" in ocserv.conf.template. ocserv doesn't crash anymore.

[shockedquartz]

Awesome trick!