Re: [Openvpn-devel] [PATCH] revamp X.509 name verification option

2013-03-07 Thread Gert Doering
Hi, On Fri, Feb 22, 2013 at 10:44:19AM +0100, Heiko Hund wrote: > This patch set tries to do X.509 name verification right. As discussed > during FOSDEM 2013, changing --tls-remote to support RFC 2253 style > subject DNs only was too radical as it broke more configurations than > expected. Acked

[Openvpn-devel] [PATCH] revamp X.509 name verification option

2013-02-22 Thread Heiko Hund
This patch set tries to do X.509 name verification right. As discussed during FOSDEM 2013, changing --tls-remote to support RFC 2253 style subject DNs only was too radical as it broke more configurations than expected. This makes --tls-remote work with old configurations again, but deprecates its