› Forums › Network Management › ZeroShell › How to configure "Remote X509 CN (optional)" in VP › Reply To: How to configure "Remote X509 CN (optional)" in VP
If you specify the Remote X509 CN field, OpenVPN will check the Common Name of the Subject of the remote peer. For host certificates the common name of the subject is the FQDN hostname.
If you omit this field, the only condition needed to establish the VPN is that the remote certificate has been signed by a trusted certification authority. In other words, by specifying the Remote X.509 CN you increase the security of the VPN.