Erik Kapfer b66b02ab73 OpenVPN: Fix for '--ns-cert-type server is deprecated' . ...

- Added extended key usage based on RFC3280 TLS rules for OpenVPNs OpenSSL configuration,
so '--remote-cert-tls' can be used instead of the old and deprecated '--ns-cert-type'
if the host certificate are newely generated with this options.
Nevertheless both directives (old and new) will work also with old CAs.

- Automatic detection if the host certificate uses the new options.
If it does, '--remote-cert-tls server' will be automatically set into the client
configuration files for Net-to-Net and Roadwarriors connections.

If it does NOT, the old '--ns-cert-type server' directive will be set in the client
configuration file.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

2017-10-11 11:55:16 +01:00

..

certs

Hinzugefügt:

2006-06-02 15:59:39 +00:00

openssl

OpenVPN: Fix for '--ns-cert-type server is deprecated' .

2017-10-11 11:55:16 +01:00

caconfig

Hinzugefügt:

2006-06-02 15:59:39 +00:00

ovpnconfig

Hinzugefügt:

2006-06-02 15:59:39 +00:00

settings

openvpn: Fix wrong default port number.

2014-05-13 20:36:58 +02:00

verify

openvpn: Fix verify script.

2013-12-25 15:12:34 +01:00