ca.crt and client-cert-not-required

[sonic9]

sorry for my english language ...

with just "via-env" authentification ,
is tunnel keep encrypted ?
is ca.crt can be bypassed ?

server.ovpn

Code: Select all

...
ca ca.crt
cert serveur.crt
key serveur.key
dh dh2048.pem
tls-auth ta.key 0
auth-user-pass-verify auth.cmd via-env
script-security 3
client-cert-not-required
...

actually works nice but I'm not sure about ca.crt security / hacks