Skip to content

R
re6stnet
Commit 8c4cc9b6 authored by Killian Lufau's avatar Killian Lufau Committed by Julien Muchembled
Browse files
Options

Replace --tls-remote with --verify-x509-name for OpenVPN 2.4+ 

/reviewed-on nexedi/re6stnet!7
parent f8da64c6
Show whitespace changes
Inline Side-by-side
Showing with 2 additions and 1 deletion
re6st/tunnel.py
View file @ 8c4cc9b6
...@@ -87,7 +87,8 @@ class Connection(object): ...@@ -87,7 +87,8 @@ class Connection(object):
self.time = time.time() self.time = time.time()
self.process = plib.client( self.process = plib.client(
self.iface, (self.address_list[self._retry],), tm.encrypt, self.iface, (self.address_list[self._retry],), tm.encrypt,
'--tls-remote', '%u/%u' % (int(self._prefix, 2), len(self._prefix)), '--verify-x509-name',
'%u/%u' % (int(self._prefix, 2), len(self._prefix)), 'name',
'--resolv-retry', '0', '--resolv-retry', '0',
'--connect-retry-max', '3', '--tls-exit', '--connect-retry-max', '3', '--tls-exit',
'--remap-usr1', 'SIGTERM', '--remap-usr1', 'SIGTERM',
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment
GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7