smeserver-openvpn-s2s/contribs10/smeserver-openvpn-s2s-0.2-use_verify_x509_name.patch

diff -Nur smeserver-openvpn-s2s-0.2/root/etc/e-smith/templates/etc/openvpn/s2s/openvpn-s2s.conf/30key smeserver-openvpn-s2s-0.2_tls_remote/root/etc/e-smith/templates/etc/openvpn/s2s/openvpn-s2s.conf/30key
--- smeserver-openvpn-s2s-0.2/root/etc/e-smith/templates/etc/openvpn/s2s/openvpn-s2s.conf/30key 2013-11-11 18:33:06.000000000 +0100
+++ smeserver-openvpn-s2s-0.2_tls_remote/root/etc/e-smith/templates/etc/openvpn/s2s/openvpn-s2s.conf/30key      2013-11-14 18:48:49.186448285 +0100
@@ -22,7 +22,7 @@
            if ( -e "/etc/openvpn/s2s/pub/$key".'_cacrl.pem' ) &&
               ( ! -z "/etc/openvpn/s2s/pub/$key".'_cacrl.pem' );
         $OUT .= "ns-cert-type client\n" if ($checkcrt eq 'enabled');
-        $OUT .= "tls-remote $tlsremote\n" if ($tlsremote ne '');
+        $OUT .= "verify-x509-name $tlsremote name\n" if ($tlsremote ne '');
     }
     else{
         $OUT .= "tls-client\n";
@@ -36,7 +36,7 @@
            if ( -e "/etc/openvpn/s2s/pub/$key".'_cacrl.pem' ) &&
               ( ! -z "/etc/openvpn/s2s/pub/$key".'_cacrl.pem' );
         $OUT .= "ns-cert-type server\n" if ($checkcrt eq 'enabled');
-        $OUT .= "tls-remote $tlsremote\n" if ($tlsremote ne '');
+        $OUT .= "verify-x509-name $tlsremote name\n" if ($tlsremote ne '');
     }
 }
 
1	diff -Nur smeserver-openvpn-s2s-0.2/root/etc/e-smith/templates/etc/openvpn/s2s/openvpn-s2s.conf/30key smeserver-openvpn-s2s-0.2_tls_remote/root/etc/e-smith/templates/etc/openvpn/s2s/openvpn-s2s.conf/30key
2	--- smeserver-openvpn-s2s-0.2/root/etc/e-smith/templates/etc/openvpn/s2s/openvpn-s2s.conf/30key 2013-11-11 18:33:06.000000000 +0100
3	+++ smeserver-openvpn-s2s-0.2_tls_remote/root/etc/e-smith/templates/etc/openvpn/s2s/openvpn-s2s.conf/30key 2013-11-14 18:48:49.186448285 +0100
4	@@ -22,7 +22,7 @@
5	if ( -e "/etc/openvpn/s2s/pub/$key".'_cacrl.pem' ) &&
6	( ! -z "/etc/openvpn/s2s/pub/$key".'_cacrl.pem' );
7	$OUT .= "ns-cert-type client\n" if ($checkcrt eq 'enabled');
8	- $OUT .= "tls-remote $tlsremote\n" if ($tlsremote ne '');
9	+ $OUT .= "verify-x509-name $tlsremote name\n" if ($tlsremote ne '');
10	}
11	else{
12	$OUT .= "tls-client\n";
13	@@ -36,7 +36,7 @@
14	if ( -e "/etc/openvpn/s2s/pub/$key".'_cacrl.pem' ) &&
15	( ! -z "/etc/openvpn/s2s/pub/$key".'_cacrl.pem' );
16	$OUT .= "ns-cert-type server\n" if ($checkcrt eq 'enabled');
17	- $OUT .= "tls-remote $tlsremote\n" if ($tlsremote ne '');
18	+ $OUT .= "verify-x509-name $tlsremote name\n" if ($tlsremote ne '');
19	}
20	}
21