OpenVPN "Enforce key usage" configuration option.

[Jimbo123]

I noticed today that there's an "Enforce key usage" option in my OpenVPN client configuration options which says that it's to "Verify that the remote host uses a server certificate".

It's toggled on by default and must have landed in the 2.6.0 release as I've never noticed it before and as far as I can find there's no documentation on it as of yet.

I'm guessing that this adds the "remote-cert-tls server" command when toggled on client side. Can anyone confirm or correct me on this?

Cheers.

[Jimbo123]

@jimbo123 I've since found this Redmine that seems to confirm that the option adds
"remote-cert-tls server" in the config for the client:

https://redmine.pfsense.org/issues/11865

This is the option that has been added to the "Cryptographic Settings" in OpenVPN client configuration options.