Replace --tls-remote with --verify-x509-name for OpenVPN 2.4+

/reviewed-on nexedi/re6stnet!7

Replace --tls-remote with --verify-x509-name for OpenVPN 2.4+
/reviewed-on nexedi/re6stnet!7
8c4cc9b6 · Killian Lufau · Julien Muchembled · f8da64c6 · 8c4cc9b6
Commit 8c4cc9b6 authored Jan 09, 2019 by Killian Lufau Committed by Julien Muchembled Feb 21, 2019
Show whitespace changes
Inline Side-by-side

Showing with 2 additions and 1 deletion

re6st/tunnel.py re6st/tunnel.py +2 -1

No files found.
--- a/re6st/tunnel.py
+++ b/re6st/tunnel.py
@@ -87,7 +87,8 @@ class Connection(object):
        self.time = time.time()
        self.process = plib.client(
            self.iface, (self.address_list[self._retry],), tm.encrypt,
-            '--tls-remote', '%u/%u' % (int(self._prefix, 2), len(self._prefix)),
+            '--verify-x509-name',
+                '%u/%u' % (int(self._prefix, 2), len(self._prefix)), 'name',
            '--resolv-retry', '0',
            '--connect-retry-max', '3', '--tls-exit',
            '--remap-usr1', 'SIGTERM',