OpenVPN "Enforce key usage" configuration option.
-
I noticed today that there's an "Enforce key usage" option in my OpenVPN client configuration options which says that it's to "Verify that the remote host uses a server certificate".
It's toggled on by default and must have landed in the 2.6.0 release as I've never noticed it before and as far as I can find there's no documentation on it as of yet.
I'm guessing that this adds the "remote-cert-tls server" command when toggled on client side. Can anyone confirm or correct me on this?
Cheers.
-
@jimbo123 I've since found this Redmine that seems to confirm that the option adds
"remote-cert-tls server" in the config for the client:https://redmine.pfsense.org/issues/11865
This is the option that has been added to the "Cryptographic Settings" in OpenVPN client configuration options.
