X509 name was missing in TLS mode

[davidsun]

I added this line to the end of my conf file:

Code: Select all

verify-x509-name l***********y name

and I even added this param to command line while starting openvpn service like

Code: Select all

--verify-x509-name ldscompany name

but I still got this error over and over again
what am I supposed to do to avoid this error?
here is the full config file:

View OriginalServer config

proto udp


lport 9999

dev tun

topology subnet

push "route 172.17.16.120 255.255.255.255"
push "dhcp-option DNS 172.17.16.1"
push "dhcp-option DNS 114.114.114.114"

user openvpn
group openvpn

cd /home/openvpn/openvpn

persist-key #重启进程不再读取key
persist-tun #重启进程不再打开tun

daemon

passtos

log-append /home/openvpn/openvpn/openvpn.log

server 10.8.0.0 255.255.255.0

#配置证书文件
dh /home/openvpn/openvpn/dh2048.pem
ca /home/openvpn/openvpn/ca.key
cert /home/openvpn/openvpn/l******y.crt
key /home/openvpn/openvpn/l******y.key


keepalive 60 120

tmp-dir /home/openvpn/openvpn/tmp


auth-user-pass-verify /home/openvpn/openvpn/authentication.sh via-file

ifconfig-pool-persist /home/openvpn/openvpn/clientips.txt
tls-auth /home/openvpn/openvpn/ta.key 0
verify-x509-name l**********y name

Thank you very much

[Pippin]

but I still got this error over and over again

We see no error.
viewtopic.php?t=22603