Changes between Version 12 and Version 13 of Openvpn23ManPage


Ignore:
Timestamp:
10/28/14 18:13:46 (6 years ago)
Author:
Samuli Seppänen
Comment:

Updated man-page to 2.3.5

Legend:

Unmodified
Added
Removed
Modified
  • Openvpn23ManPage

    v12 v13  
    19751975<P>
    19761976The server timeout is set twice the value of the second argument.
    1977 This ensures that a timeout is dectected on client side
     1977This ensures that a timeout is detected on client side
    19781978before the server side drops the connection.
    19791979<P>
     
    30273027<P>
    30283028Adaptive compression tries to optimize the case where you have
    3029 compression enabled, but you are sending predominantly uncompressible
     3029compression enabled, but you are sending predominantly incompressible
    30303030(or pre-compressed) packets over the tunnel, such as an FTP or rsync transfer
    30313031of a large, compressed file.  With adaptive compression,
     
    32743274
    32753275<DL COMPACT>
    3276 <DT><B>--server network netmask</B>
     3276<DT><B>--server network netmask ['nopool']</B>
    32773277
    32783278<DD>
     
    33103310     ifconfig-pool 10.8.0.2 10.8.0.254 255.255.255.0
    33113311   push &quot;route-gateway 10.8.0.1&quot;
     3312   if route-gateway unset:
     3313     route-gateway 10.8.0.2
     3314
    33123315</B></PRE>
    33133316
     
    42734276
    42744277<DT><DD>
    4275 In addition the old behavivour was to remap any character other than
     4278In addition the old behaviour was to remap any character other than
    42764279alphanumeric, underscore ('_'), dash ('-'), dot ('.'), and slash ('/') to
    42774280underscore ('_').  The X.509 Subject string as returned by the
     
    52995302<B>0</B>
    53005303
    5301 (default) -- Try to determind automatically.
     5304(default) -- Try to determine automatically.
    53025305<BR>
    53035306
     
    57715774is available via the peer_cert environment variable.
    57725775
    5773 <DT><B>--x509-username-field fieldname</B>
    5774 
    5775 <DD>
    5776 Field in x509 certificate subject to be used as username (default=CN).
    5777 <B>Fieldname</B>
    5778 
    5779 will be uppercased before matching. When this option is used, the
    5780 <B>--verify-x509-username</B>
    5781 
    5782 option will match against the chosen fieldname instead of the CN.
     5776<DT><B>--x509-username-field [ext:]fieldname</B>
     5777
     5778<DD>
     5779Field in the X.509 certificate subject to be used as the username (default=CN).
     5780Typically, this option is specified with
     5781<B>fieldname</B>
     5782
     5783as either of the following:
     5784<P>
     5785<B>--x509-username-field</B>
     5786
     5787emailAddress
     5788<BR>
     5789
     5790<B>--x509-username-field ext:</B>subjectAltName
     5791
     5792<P>
     5793The first example uses the value of the &quot;emailAddress&quot; attribute in the
     5794certificate's Subject field as the username.  The second example uses
     5795the
     5796<B>ext:</B>
     5797
     5798prefix to signify that the X.509 extension
     5799<B>fieldname</B>
     5800
     5801&quot;subjectAltName&quot; be searched for an rfc822Name (email) field to be used
     5802as the username.  In cases where there are multiple email addresses
     5803in
     5804<B>ext:fieldname</B>,
     5805
     5806the last occurrence is chosen.
     5807<P>
     5808When this option is used, the
     5809<B>--verify-x509-name</B>
     5810
     5811option will match against the chosen
     5812<B>fieldname</B>
     5813
     5814instead of the Common Name.
     5815<P>
     5816<B>Please note:</B>
     5817
     5818This option has a feature which will convert an all-lowercase
     5819<B>fieldname</B>
     5820
     5821to uppercase characters, e.g., ou -&gt; OU.  A mixed-case
     5822<B>fieldname</B>
     5823
     5824or one having the
     5825<B>ext:</B>
     5826
     5827prefix will be left as-is.  This automatic upcasing feature
     5828is deprecated and will be removed in a future release.
    57835829
    57845830<DT><B>--tls-remote name (DEPRECATED)</B>
     
    83118357<A HREF="/cgi-bin/man/man2html">man2html</A>,
    83128358using the manual pages.<BR>
    8313 Time: 07:38:58 GMT, May 06, 2014
     8359Time: 18:09:54 GMT, October 28, 2014
    83148360}}}