0
0
mirror of https://github.com/OpenVPN/openvpn.git synced 2024-09-20 03:52:28 +02:00

Added warning about tls-remote in man page.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@6384 e7ae566f-a301-0410-adde-c780ea21d3b5
This commit is contained in:
James Yonan 2010-08-10 17:31:31 +00:00
parent fe7c58f0d2
commit 379b549c81

View File

@ -4278,6 +4278,13 @@ or common name equal to
The remote host must also pass all other tests The remote host must also pass all other tests
of verification. of verification.
.B NOTE:
Because tls-remote may test against a common name prefix,
only use this option when you are using OpenVPN with a custom CA
certificate that is under your control.
Never use this option when your client certificates are signed by
a third party, such as a commercial web CA.
Name can also be a common name prefix, for example if you Name can also be a common name prefix, for example if you
want a client to only accept connections to "Server-1", want a client to only accept connections to "Server-1",
"Server-2", etc., you can simply use "Server-2", etc., you can simply use