mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-26 19:00:34 +02:00
openvpn: Update to version 2.3.7, added --verify-x509-name directive.
The tls-remote directive is deprecated and will be removed with OpenVPN version 2.4 . Added instead --verify-x509-name HOST name into ovpnmain.cgi. Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
committed by
Michael Tremer
parent
9977da131b
commit
964700d414
@@ -2333,7 +2333,7 @@ else
|
||||
}
|
||||
print CLIENTCONF "verb 3\r\n";
|
||||
print CLIENTCONF "ns-cert-type server\r\n";
|
||||
print CLIENTCONF "tls-remote $vpnsettings{ROOTCERT_HOSTNAME}\r\n";
|
||||
print CLIENTCONF "verify-x509-name $vpnsettings{ROOTCERT_HOSTNAME} name\r\n";
|
||||
if ($vpnsettings{MSSFIX} eq 'on') {
|
||||
print CLIENTCONF "mssfix\r\n";
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user