diff options
| author | jim-p <jimp@pfsense.org> | 2013-10-31 13:26:15 -0400 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2013-10-31 13:26:15 -0400 |
| commit | 7c9f292fe9d031cb6b5c5dacc888c894f67987c3 (patch) | |
| tree | 5600a99a0a2f14b8b645575fd8f1b467453bfff5 | |
| parent | dea4128ef42f3346dca4b1e942c3e081cb30178a (diff) | |
| download | pfsense-packages-7c9f292fe9d031cb6b5c5dacc888c894f67987c3.tar.gz pfsense-packages-7c9f292fe9d031cb6b5c5dacc888c894f67987c3.tar.bz2 pfsense-packages-7c9f292fe9d031cb6b5c5dacc888c894f67987c3.zip | |
tls-remote is deprecated, use verify-x509-name, which also works on the iOS client so no need to exclude it from getting the line either.
| -rwxr-xr-x | config/openvpn-client-export/openvpn-client-export.inc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/config/openvpn-client-export/openvpn-client-export.inc b/config/openvpn-client-export/openvpn-client-export.inc index 2231516b..12842d64 100755 --- a/config/openvpn-client-export/openvpn-client-export.inc +++ b/config/openvpn-client-export/openvpn-client-export.inc @@ -208,9 +208,9 @@ function openvpn_client_export_config($srvid, $usrid, $crtid, $useaddr, $quotese if (($expformat != "inlinedroid") && ($expformat != "inlineios")) $conf .= "resolv-retry infinite{$nl}"; $conf .= "$remotes{$nl}"; - if (!empty($servercn) && ($expformat != "inlineios")) { + if (!empty($servercn)) { $qw = ($quoteservercn) ? "\"" : ""; - $conf .= "tls-remote {$qw}{$servercn}{$qw}{$nl}"; + $conf .= "verify-x509-name {$qw}{$servercn}{$qw} name{$nl}"; } if (!empty($proxy)) { |