From 7c9f292fe9d031cb6b5c5dacc888c894f67987c3 Mon Sep 17 00:00:00 2001 From: jim-p Date: Thu, 31 Oct 2013 13:26:15 -0400 Subject: tls-remote is deprecated, use verify-x509-name, which also works on the iOS client so no need to exclude it from getting the line either. --- config/openvpn-client-export/openvpn-client-export.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/config/openvpn-client-export/openvpn-client-export.inc b/config/openvpn-client-export/openvpn-client-export.inc index 2231516b..12842d64 100755 --- a/config/openvpn-client-export/openvpn-client-export.inc +++ b/config/openvpn-client-export/openvpn-client-export.inc @@ -208,9 +208,9 @@ function openvpn_client_export_config($srvid, $usrid, $crtid, $useaddr, $quotese if (($expformat != "inlinedroid") && ($expformat != "inlineios")) $conf .= "resolv-retry infinite{$nl}"; $conf .= "$remotes{$nl}"; - if (!empty($servercn) && ($expformat != "inlineios")) { + if (!empty($servercn)) { $qw = ($quoteservercn) ? "\"" : ""; - $conf .= "tls-remote {$qw}{$servercn}{$qw}{$nl}"; + $conf .= "verify-x509-name {$qw}{$servercn}{$qw} name{$nl}"; } if (!empty($proxy)) { -- cgit v1.2.3