OpenVPN tunnel server: add option "remote-cert-tls" in exported file

Tbaile commented 3 months ago

How to reproduce:

go to OpenVPN Tunnel, server section
create a tunnel server with standard options
Download the client configuration file
Import the file on the client
client’s logs will show the warning (WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.)

because the clinet configuration is missing the following option

remote-cert-tls server

this way the client continues to show the WARNING even though the certificate has EKU.

REF:

Tbaile commented 3 months ago

Test case (using two firewalls in the same RED network):

Create a OpenVPN server in the server firewall
Download the configuration and import it in the client
Ensure that in the client there's no log line about WARNING: No server certificate verification method has been enabled.

github-actions[bot] commented 3 months ago

gsanchietti commented 2 months ago

The warning is gone when using the new JSON file.

Verified.

NethServer / nethsecurity