Re: [Openvpn-devel] Bug: extended x509-username-field broken in git

2011-07-06 Thread Markus Koetter
On 07/05/2011 03:15 PM, David Sommerseth wrote: Can you please use git bisect to locate the offending commit? I figured out this never really worked with openvpn git at all. During discussing the patch, the check for the error_depth disappeared. So, if the root certificate lacked the extension,

Re: [Openvpn-devel] OpenVPN 2.2-RC released

2011-03-09 Thread Markus Koetter
Hi, On 03/04/2011 08:26 PM, Samuli Seppänen wrote: * Make the --x509-username-field feature an opt-in feature given the x509 username field is optional now, any chance to get x509 v3 extensions as username [1] merged if they are made opt-in too? Markus [1] http://thread.gmane.org/g

[Openvpn-devel] use extv3 extensions such as subjectAltName as common_name

2010-11-24 Thread Markus Koetter
Hi, attached is a patch which allows using the extv3 extension of a certificate as common name with email address. Email addresses are more likely to be unique than the common name, and the environment forced me to use the subjectAltName extv3 extension for authentication. So, there is alread