From: Daniel Glanzmann <dg@ipfire.org>
Date: Mon, 29 Sep 2008 19:12:15 +0000 (+0200)
Subject: added tls-remote to openvpn for security reasons
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=3c5d386e5725b18651925af6b322aab1920c6de9;p=people%2Fteissler%2Fipfire-2.x.git

added tls-remote to openvpn for security reasons
---

diff --git a/html/cgi-bin/ovpnmain.cgi b/html/cgi-bin/ovpnmain.cgi
index 746f7eece..374b25f5e 100644
--- a/html/cgi-bin/ovpnmain.cgi
+++ b/html/cgi-bin/ovpnmain.cgi
@@ -1378,6 +1378,7 @@ END
     }
     print CLIENTCONF "verb 3\r\n";
     print CLIENTCONF "ns-cert-type server\r\n";
+    print CLIENTCONF "tls-remote $vpnsettings{ROOTCERT_HOSTNAME}\r\n";
     close(CLIENTCONF);
     $zip->addFile( "$tempdir/$clientovpn", $clientovpn) or die "Can't add file $clientovpn\n";
     my $status = $zip->writeToFileNamed($zippathname);