Reply To: How to configure "Remote X509 CN (optional)" in VP

Home Page Forums Network Management ZeroShell How to configure "Remote X509 CN (optional)" in VP Reply To: How to configure "Remote X509 CN (optional)" in VP

#47238

imported_fulvio
Participant

If you specify the Remote X509 CN field, OpenVPN will check the Common Name of the Subject of the remote peer. For host certificates the common name of the subject is the FQDN hostname.
If you omit this field, the only condition needed to establish the VPN is that the remote certificate has been signed by a trusted certification authority. In other words, by specifying the Remote X.509 CN you increase the security of the VPN.

Regards
Fulvio