Check the certificate key usage

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-05-14 20:57:30 +00:00 · 2017-05-14 20:57:30 +00:00 · 4cc1b78ff3
commit 4cc1b78ff3
parent 42b69d73f3
2 changed files with 2 additions and 0 deletions
--- a/roles/openvpn/client/files/client.conf
+++ b/roles/openvpn/client/files/client.conf
@ -22,6 +22,7 @@ auth SHA512
 ca ca.crt
 cert client.crt
 key client.key
+remote-cert-tls server

 comp-lzo

--- a/roles/openvpn/server/files/server.conf
+++ b/roles/openvpn/server/files/server.conf
@ -16,6 +16,7 @@ cipher AES-256-CBC
 auth SHA512
 dh dh2048.pem
 crl-verify crl.pem
+remote-cert-tls client

 keepalive 10 120