From 2dc46e64c7ce808e2d052a4f78cc724cfb54535a Mon Sep 17 00:00:00 2001 From: Arne Schwabe Date: Fri, 8 Mar 2013 14:12:04 +0100 Subject: Enhance/fix --verify-x509-name support --- res/layout/tlsremote.xml | 64 ++++++++++++++++++++++++++---------------------- res/values/strings.xml | 6 ++++- 2 files changed, 40 insertions(+), 30 deletions(-) (limited to 'res') diff --git a/res/layout/tlsremote.xml b/res/layout/tlsremote.xml index 3c16566a..e93b9364 100644 --- a/res/layout/tlsremote.xml +++ b/res/layout/tlsremote.xml @@ -1,38 +1,44 @@ - - + android:orientation="vertical" > - + - - - + + + + + + + + + + - \ No newline at end of file + \ No newline at end of file diff --git a/res/values/strings.xml b/res/values/strings.xml index 7d35c20d..dd36c46e 100755 --- a/res/values/strings.xml +++ b/res/values/strings.xml @@ -65,7 +65,7 @@ Except TLS Server Checks the Remote Server Certificate Subject DN Certificate Hostname Check - Specify the check used to verify the remote certificate DN\n\Specify the complete DN (e.g. C=DE, L=Paderborn, OU=Avian IP Carriers, CN=openvpn.blinkt.de) or the RDN (openvpn.blinkt.de in the DN example) or an RDN prefix for verification.\n\nRDN prefix will use prefix matching. \"Server\" matches \"Server-1\" and \"Server-2\"\nLeaving the text field empty will check the RDN against the server hostname.\nFor more details see the OpenVPN 2.3.1+ manpage under --verify-x509-name + Specify the check used to verify the remote certificate DN (e.g. C=DE, L=Paderborn, OU=Avian IP Carriers, CN=openvpn.blinkt.de)\n\nSpecify the complete DN or the RDN (openvpn.blinkt.de in the example) or an RDN prefix for verification.\n\nRDN prefix will use prefix matching. \"Server\" matches \"Server-1\" and \"Server-2\"\n\nLeaving the text field empty will check the RDN against the server hostname.\n\nFor more details see the OpenVPN 2.3.1+ manpage under —verify-x509-name Remote certificate subject Enables the TLS Key Authentication TLS Auth File @@ -272,5 +272,9 @@ Add Send config file Complete DN + Your imported configuration used the old DEPRECATED tls-remote option which uses a different DN format. + RDN (common name) + RDN prefix + tls-remote (DEPRECATED) \ No newline at end of file -- cgit v1.2.3