Peer-fingerpring sharing needs to work without the peer certificate

TinCanTech / easy-tls

Manage and Inline OpenVPN TLS keys and Easy-RSA PKI credentials. Supports OpenVPN TLS-Crypt-V2 key system and OpenVPN Peer-Fingerprint mode.

GNU General Public License v2.0

89 stars 19 forks source link

Peer-fingerpring sharing needs to work without the peer certificate #209

Closed TinCanTech closed 3 years ago

TinCanTech commented 3 years ago

Typically, each node (Server or client) will build it's own self-signed certificate and then share their fingerprints with the peer. So Easy-TLS needs to allow adding a peer-fingerprint without having the peer certificate.

TinCanTech commented 3 years ago

Closed via https://github.com/TinCanTech/easy-tls/commit/d44c0f09d84f5480aa45df9784ef25f78c4b7bbf