smeserver-openvpn-s2s/contribs10/smeserver-openvpn-s2s-0.2-use_verify_x509_name.patch

diff -Nur smeserver-openvpn-s2s-0.2/root/etc/e-smith/templates/etc/openvpn/s2s/openvpn-s2s.conf/30key smeserver-openvpn-s2s-0.2_tls_remote/root/etc/e-smith/templates/etc/openvpn/s2s/openvpn-s2s.conf/30key
--- smeserver-openvpn-s2s-0.2/root/etc/e-smith/templates/etc/openvpn/s2s/openvpn-s2s.conf/30key 2013-11-11 18:33:06.000000000 +0100
+++ smeserver-openvpn-s2s-0.2_tls_remote/root/etc/e-smith/templates/etc/openvpn/s2s/openvpn-s2s.conf/30key      2013-11-14 18:48:49.186448285 +0100
@@ -22,7 +22,7 @@
            if ( -e "/etc/openvpn/s2s/pub/$key".'_cacrl.pem' ) &&
               ( ! -z "/etc/openvpn/s2s/pub/$key".'_cacrl.pem' );
         $OUT .= "ns-cert-type client\n" if ($checkcrt eq 'enabled');
-        $OUT .= "tls-remote $tlsremote\n" if ($tlsremote ne '');
+        $OUT .= "verify-x509-name $tlsremote name\n" if ($tlsremote ne '');
     }
     else{
         $OUT .= "tls-client\n";
@@ -36,7 +36,7 @@
            if ( -e "/etc/openvpn/s2s/pub/$key".'_cacrl.pem' ) &&
               ( ! -z "/etc/openvpn/s2s/pub/$key".'_cacrl.pem' );
         $OUT .= "ns-cert-type server\n" if ($checkcrt eq 'enabled');
-        $OUT .= "tls-remote $tlsremote\n" if ($tlsremote ne '');
+        $OUT .= "verify-x509-name $tlsremote name\n" if ($tlsremote ne '');
     }
 }
 
1	brianr	1.1	diff -Nur smeserver-openvpn-s2s-0.2/root/etc/e-smith/templates/etc/openvpn/s2s/openvpn-s2s.conf/30key smeserver-openvpn-s2s-0.2_tls_remote/root/etc/e-smith/templates/etc/openvpn/s2s/openvpn-s2s.conf/30key
2			--- smeserver-openvpn-s2s-0.2/root/etc/e-smith/templates/etc/openvpn/s2s/openvpn-s2s.conf/30key 2013-11-11 18:33:06.000000000 +0100
3			+++ smeserver-openvpn-s2s-0.2_tls_remote/root/etc/e-smith/templates/etc/openvpn/s2s/openvpn-s2s.conf/30key 2013-11-14 18:48:49.186448285 +0100
4			@@ -22,7 +22,7 @@
5			if ( -e "/etc/openvpn/s2s/pub/$key".'_cacrl.pem' ) &&
6			( ! -z "/etc/openvpn/s2s/pub/$key".'_cacrl.pem' );
7			$OUT .= "ns-cert-type client\n" if ($checkcrt eq 'enabled');
8			- $OUT .= "tls-remote $tlsremote\n" if ($tlsremote ne '');
9			+ $OUT .= "verify-x509-name $tlsremote name\n" if ($tlsremote ne '');
10			}
11			else{
12			$OUT .= "tls-client\n";
13			@@ -36,7 +36,7 @@
14			if ( -e "/etc/openvpn/s2s/pub/$key".'_cacrl.pem' ) &&
15			( ! -z "/etc/openvpn/s2s/pub/$key".'_cacrl.pem' );
16			$OUT .= "ns-cert-type server\n" if ($checkcrt eq 'enabled');
17			- $OUT .= "tls-remote $tlsremote\n" if ($tlsremote ne '');
18			+ $OUT .= "verify-x509-name $tlsremote name\n" if ($tlsremote ne '');
19			}
20			}
21