From patchwork Fri Feb 1 09:43:48 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: openvpn-devel=lists.sourceforge.net@thomas.quinot.org X-Patchwork-Id: 682 Return-Path: Delivered-To: patchwork@openvpn.net Delivered-To: patchwork@openvpn.net Received: from director9.mail.ord1d.rsapps.net ([172.28.255.1]) by backend30.mail.ord1d.rsapps.net with LMTP id KIjSMduvVFxBFgAAIUCqbw for ; Fri, 01 Feb 2019 15:45:15 -0500 Received: from director7.mail.ord1c.rsapps.net ([172.28.255.1]) by director9.mail.ord1d.rsapps.net with LMTP id YJmdMduvVFxcQQAAalYnBA ; Fri, 01 Feb 2019 15:45:15 -0500 Received: from smtp27.gate.ord1c ([172.28.255.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) by director7.mail.ord1c.rsapps.net with LMTP id IIsyMduvVFx9TgAAqdfm7w ; Fri, 01 Feb 2019 15:45:15 -0500 X-Spam-Threshold: 95 X-Spam-Score: 0 X-Spam-Flag: NO X-Virus-Scanned: OK X-Orig-To: openvpnslackdevel@openvpn.net X-Originating-Ip: [216.105.38.7] Authentication-Results: smtp27.gate.ord1c.rsapps.net; iprev=pass policy.iprev="216.105.38.7"; spf=pass smtp.mailfrom="openvpn-devel-bounces@lists.sourceforge.net" smtp.helo="lists.sourceforge.net"; dkim=fail (signature verification failed) header.d=sourceforge.net; dkim=fail (signature verification failed) header.d=sf.net; dmarc=none (p=nil; dis=none) header.from=thomas.quinot.org X-Suspicious-Flag: YES X-Classification-ID: 4685ddce-2662-11e9-b5e6-b8ca3a655ab8-1-1 Received: from [216.105.38.7] ([216.105.38.7:5805] helo=lists.sourceforge.net) by smtp27.gate.ord1c.rsapps.net (envelope-from ) (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384) id 6A/E5-15216-ADFA45C5; Fri, 01 Feb 2019 15:45:14 -0500 Received: from [127.0.0.1] (helo=sfs-ml-4.v29.lw.sourceforge.com) by sfs-ml-4.v29.lw.sourceforge.com with esmtp (Exim 4.90_1) (envelope-from ) id 1gpffb-0005dL-64; Fri, 01 Feb 2019 20:44:15 +0000 Received: from [172.30.20.202] (helo=mx.sourceforge.net) by sfs-ml-4.v29.lw.sourceforge.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.90_1) (envelope-from ) id 1gpffZ-0005dC-FZ for openvpn-devel@lists.sourceforge.net; Fri, 01 Feb 2019 20:44:13 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=Message-Id:Date:Subject:Cc:To:From:Sender:Reply-To: MIME-Version:Content-Type:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=UWcZNV0RmHJf3el0M021pEyUQY4gIu+P2YJRfNAIxwk=; b=lDI3Y8sZR7NOUT8GOPZNYD0ni5 45sAIXApyDCVvsY6qD1Oz9p+jWAmjDPQkiUW7rpYSV4OJy0iNiE6I4tHgYlScknuNLSM3I5e+lkZ1 5ksNU3DmR9fh/yOLDvqUwGn5CDv1wCc+Ki5sTx9oeGhW8RuaumpuU47w1iHraQqS7cm0=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=Message-Id:Date:Subject:Cc:To:From:Sender:Reply-To:MIME-Version: Content-Type:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=UWcZNV0RmHJf3el0M021pEyUQY4gIu+P2YJRfNAIxwk=; b=TMCwsxFolxopdJuGvYSeZRtD44 W5h7qrOXxrmVd7Y+3BblN/FDlwm6IqF8ck0ugC4lN+RFia+pgebP560yzDbxQAdCQznLJ5hEH16VI hLWpyp76qWTpPCRlL997ZcfCt0VjoNMEOZ1DLXvdwShwyVyWpaQrIyGiZFtACfl9f2fs=; Received: from mel.act-europe.fr ([194.98.77.210] helo=smtp.eu.adacore.com) by sfi-mx-3.v28.lw.sourceforge.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.90_1) id 1gpffR-00EB0n-Oy for openvpn-devel@lists.sourceforge.net; Fri, 01 Feb 2019 20:44:13 +0000 Received: from localhost (localhost [127.0.0.1]) by filtered-smtp.eu.adacore.com (Postfix) with ESMTP id 69F478138F; Fri, 1 Feb 2019 21:43:57 +0100 (CET) Received: from smtp.eu.adacore.com ([127.0.0.1]) by localhost (smtp.eu.adacore.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N9RyoeX2BZYr; Fri, 1 Feb 2019 21:43:57 +0100 (CET) Received: from malevil-2017.act-europe.fr (malevil-2017.act-europe.fr [IPv6:2a02:2ab8:224:1:a64c:c8ff:fe5b:7499]) by smtp.eu.adacore.com (Postfix) with ESMTP id 53C118138E; Fri, 1 Feb 2019 21:43:57 +0100 (CET) Received: by malevil-2017.act-europe.fr (Postfix, from userid 1000) id 50FC4831E7; Fri, 1 Feb 2019 21:43:57 +0100 (CET) From: openvpn-devel=lists.sourceforge.net@thomas.quinot.org To: openvpn-devel@lists.sourceforge.net Date: Fri, 1 Feb 2019 21:43:48 +0100 Message-Id: <20190201204348.22326-1-openvpn-devel=lists.sourceforge.net@thomas.quinot.org> X-Mailer: git-send-email 2.11.0 X-Spam-Report: Spam Filtering performed by mx.sourceforge.net. See http://spamassassin.org/tag/ for more details. -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [194.98.77.210 listed in list.dnswl.org] 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different X-Headers-End: 1gpffR-00EB0n-Oy Subject: [Openvpn-devel] [PATCH] Fix documentation of tls-verify script argument X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Thomas Quinot MIME-Version: 1.0 Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox From: Thomas Quinot The second argument is the entire subject DN, not just the CN. Acked-by: Steffan Karger --- doc/openvpn.8 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/openvpn.8 b/doc/openvpn.8 index 7abcaf1e..f80393ee 100644 --- a/doc/openvpn.8 +++ b/doc/openvpn.8 @@ -5448,7 +5448,7 @@ is executed two arguments are appended after any arguments specified in .B cmd certificate_depth subject These arguments are, respectively, the current certificate depth and -the X509 common name (cn) of the peer. +the X509 subject distinguished name (dn) of the peer. This feature is useful if the peer you want to trust has a certificate which was signed by a certificate authority who also signed many