aboutsummaryrefslogtreecommitdiff
path: root/openvpn.8
diff options
context:
space:
mode:
authorRobert Fischer <ml-openvpn@trispace.org>2011-04-21 22:55:52 +0200
committerDavid Sommerseth <davids@redhat.com>2011-06-14 11:14:27 +0200
commita599b7f62998de9502e23b3ca79e88d12089486b (patch)
tree49bd54f09f3adc7df22e8a12c400950d9b6e0359 /openvpn.8
parentAdded info about --show-proxy-settings (diff)
downloadopenvpn-a599b7f62998de9502e23b3ca79e88d12089486b.tar.xz
Documented --x509-username-field option
Also fixed a typo in the --help screen. Signed-off-by: Robert Fischer <ml-openvpn@trispace.org> Acked-by: David Sommerseth <davids@redhat.com> Signed-off-by: David Sommerseth <davids@redhat.com> (cherry picked from commit ca8af756c52ab7a4aecb857f60d6124e58458f0a)
Diffstat (limited to '')
-rw-r--r--openvpn.88
1 files changed, 8 insertions, 0 deletions
diff --git a/openvpn.8 b/openvpn.8
index 6444558..428233f 100644
--- a/openvpn.8
+++ b/openvpn.8
@@ -4356,6 +4356,14 @@ the tls-verify script returns. The file name used for the certificate
is available via the peer_cert environment variable.
.\"*********************************************************
.TP
+.B \-\-x509-username-field fieldname
+Field in x509 certificate subject to be used as username (default=CN).
+.B Fieldname
+will be uppercased before matching. When this option is used, the
+--tls-remote option will match against the chosen fieldname instead
+of the CN.
+.\"*********************************************************
+.TP
.B \-\-tls-remote name
Accept connections only from a host with X509 name
or common name equal to