aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2013-10-31 13:26:15 -0400
committerjim-p <jimp@pfsense.org>2013-10-31 13:26:15 -0400
commit7c9f292fe9d031cb6b5c5dacc888c894f67987c3 (patch)
tree5600a99a0a2f14b8b645575fd8f1b467453bfff5
parentdea4128ef42f3346dca4b1e942c3e081cb30178a (diff)
downloadpfsense-packages-7c9f292fe9d031cb6b5c5dacc888c894f67987c3.tar.gz
pfsense-packages-7c9f292fe9d031cb6b5c5dacc888c894f67987c3.tar.bz2
pfsense-packages-7c9f292fe9d031cb6b5c5dacc888c894f67987c3.zip
tls-remote is deprecated, use verify-x509-name, which also works on the iOS client so no need to exclude it from getting the line either.
-rwxr-xr-xconfig/openvpn-client-export/openvpn-client-export.inc4
1 files changed, 2 insertions, 2 deletions
diff --git a/config/openvpn-client-export/openvpn-client-export.inc b/config/openvpn-client-export/openvpn-client-export.inc
index 2231516b..12842d64 100755
--- a/config/openvpn-client-export/openvpn-client-export.inc
+++ b/config/openvpn-client-export/openvpn-client-export.inc
@@ -208,9 +208,9 @@ function openvpn_client_export_config($srvid, $usrid, $crtid, $useaddr, $quotese
if (($expformat != "inlinedroid") && ($expformat != "inlineios"))
$conf .= "resolv-retry infinite{$nl}";
$conf .= "$remotes{$nl}";
- if (!empty($servercn) && ($expformat != "inlineios")) {
+ if (!empty($servercn)) {
$qw = ($quoteservercn) ? "\"" : "";
- $conf .= "tls-remote {$qw}{$servercn}{$qw}{$nl}";
+ $conf .= "verify-x509-name {$qw}{$servercn}{$qw} name{$nl}";
}
if (!empty($proxy)) {