Commit 8c4cc9b6 authored by Killian Lufau's avatar Killian Lufau Committed by Julien Muchembled

Replace --tls-remote with --verify-x509-name for OpenVPN 2.4+

/reviewed-on nexedi/re6stnet!7
parent f8da64c6
...@@ -87,7 +87,8 @@ class Connection(object): ...@@ -87,7 +87,8 @@ class Connection(object):
self.time = time.time() self.time = time.time()
self.process = plib.client( self.process = plib.client(
self.iface, (self.address_list[self._retry],), tm.encrypt, self.iface, (self.address_list[self._retry],), tm.encrypt,
'--tls-remote', '%u/%u' % (int(self._prefix, 2), len(self._prefix)), '--verify-x509-name',
'%u/%u' % (int(self._prefix, 2), len(self._prefix)), 'name',
'--resolv-retry', '0', '--resolv-retry', '0',
'--connect-retry-max', '3', '--tls-exit', '--connect-retry-max', '3', '--tls-exit',
'--remap-usr1', 'SIGTERM', '--remap-usr1', 'SIGTERM',
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment