Re: [Openvpn-devel] about client-cert-not-required

2015-06-22 Thread Jan Just Keijser
Hi, On 22/06/15 23:20, Jason Haar wrote: On 23/06/15 03:50, Jan Just Keijser wrote: 1) do we think it's valuable to add something like this (currently NO cert checks are done when 'client-cert-not-required' is used) ? sounds like what you really want is for this to be renamed

Re: [Openvpn-devel] about client-cert-not-required

2015-06-22 Thread Jason Haar
On 23/06/15 03:50, Jan Just Keijser wrote: > 1) do we think it's valuable to add something like this (currently NO > cert checks are done when 'client-cert-not-required' is used) ? sounds like what you really want is for this to be renamed "--verify-client-cert (none|optional|required)" - with

[Openvpn-devel] about client-cert-not-required

2015-06-22 Thread Jan Just Keijser
hi all, just found out that when you use 'client-cert-not-required' that the client certificate is not checked at all, even if one is presented. I'm not sure if that's by design but I think it would be handy to check the client certificate if presented by the client. This allows an admin to