Re: [Openvpn-devel] proper configuring of "tls-verify"

2017-09-17 Thread Steffan Karger
Hi, On 11-09-17 15:23, Илья Шипицин wrote: > 2017-09-11 17:30 GMT+05:00 David Sommerseth > >: > > On 11/09/17 14:02, Илья Шипицин wrote: > > > > > > 2017-09-11 16:54 GMT+05:00 Илья Шипицин

Re: [Openvpn-devel] proper configuring of "tls-verify"

2017-09-11 Thread Илья Шипицин
2017-09-11 17:30 GMT+05:00 David Sommerseth < open...@sf.lists.topphemmelig.net>: > On 11/09/17 14:02, Илья Шипицин wrote: > > > > > > 2017-09-11 16:54 GMT+05:00 Илья Шипицин > >: > > > > > > > > 2017-09-11 16:45 GMT+05:00 Jan Just Keijser

Re: [Openvpn-devel] proper configuring of "tls-verify"

2017-09-11 Thread Arne Schwabe
Am 11.09.17 um 14:30 schrieb David Sommerseth: > On 11/09/17 14:02, Илья Шипицин wrote: >> >> >> 2017-09-11 16:54 GMT+05:00 Илья Шипицин > >: >> >> >> >> 2017-09-11 16:45 GMT+05:00 Jan Just Keijser >

Re: [Openvpn-devel] proper configuring of "tls-verify"

2017-09-11 Thread David Sommerseth
On 11/09/17 14:02, Илья Шипицин wrote: > > > 2017-09-11 16:54 GMT+05:00 Илья Шипицин >: > > > > 2017-09-11 16:45 GMT+05:00 Jan Just Keijser >: > > Hi, > > On 11/09/17

Re: [Openvpn-devel] proper configuring of "tls-verify"

2017-09-11 Thread Илья Шипицин
2017-09-11 16:54 GMT+05:00 Илья Шипицин : > > > 2017-09-11 16:45 GMT+05:00 Jan Just Keijser : > >> Hi, >> >> On 11/09/17 13:22, Илья Шипицин wrote: >> >>> Hello, >>> >>> is someone actually using "tls-verify" in production ? >>> we tried to implement

Re: [Openvpn-devel] proper configuring of "tls-verify"

2017-09-11 Thread Илья Шипицин
2017-09-11 16:45 GMT+05:00 Jan Just Keijser : > Hi, > > On 11/09/17 13:22, Илья Шипицин wrote: > >> Hello, >> >> is someone actually using "tls-verify" in production ? >> we tried to implement additional certificate check using tls-verify >> >> >> while it works in general, in

Re: [Openvpn-devel] proper configuring of "tls-verify"

2017-09-11 Thread Jan Just Keijser
Hi, On 11/09/17 13:22, Илья Шипицин wrote: Hello, is someone actually using "tls-verify" in production ? we tried to implement additional certificate check using tls-verify while it works in general, in case when it hits "exit 1", it look like a timeout from client point of view. it is not

[Openvpn-devel] proper configuring of "tls-verify"

2017-09-11 Thread Илья Шипицин
Hello, is someone actually using "tls-verify" in production ? we tried to implement additional certificate check using tls-verify while it works in general, in case when it hits "exit 1", it look like a timeout from client point of view. it is not any good Cheers, Ilya Shipitsin