Re: [Openvpn-users] Passing password for client key as argument

[Charles Duffy <cduffy@xxxxxxxxxxx>]

There is no real difference in security between storing the key in 
plaintext and storing the key encrypted with the password in plaintext 
on the same hard drive with the same file permissions.

That said, if you want to use an encrypted key without the pause on 
startup, you can use the management interface to pass in the password 
after-the-fact, or write a quick expect script which will accept it on 
the command line (though you should never pass sensitive information on 
the command line, as it is visible to other users and processes via ps). 
That said, I hardly see a point to doing either of these things; it 
probably makes more sense, as has previously been suggested, to simply 
decrypt your key.

______________________
OpenVPN mailing lists
https://lists.sourceforge.net/lists/listinfo/openvpn-users