diff options
| -rw-r--r-- | openvpn.8 | 10 | ||||
| -rw-r--r-- | options.c | 2 |
2 files changed, 6 insertions, 6 deletions
@@ -4051,8 +4051,8 @@ or Require that peer certificate was signed with an explicit .B key usage. -This is useful security option for clients, to ensure that -the host they connect with is a designated server. +This is a useful security option for clients, to ensure that +the host they connect to is a designated server. The key usage should be encoded in hex, more than one key usage can be specified. @@ -4062,8 +4062,8 @@ usage can be specified. Require that peer certificate was signed with an explicit .B extended key usage. -This is useful security option for clients, to ensure that -the host they connect with is a designated server. +This is a useful security option for clients, to ensure that +the host they connect to is a designated server. The extended key usage should be encoded in oid notation, or OpenSSL symbolic representation. @@ -4077,7 +4077,7 @@ and based on TLS rules. This is a useful security option for clients, to ensure that -the host they connect with is a designated server. +the host they connect to is a designated server. The .B --remote-cert-tls client @@ -469,7 +469,7 @@ static const char usage_message[] = " value should be given in hex format.\n" "--remote-cert-eku oid : Require that the peer certificate was signed with\n" " explicit extended key usage. Extended key usage can be encoded\n" - " as on object identifier or OpenSSL string representation.\n" + " as an object identifier or OpenSSL string representation.\n" "--remote-cert-tls t: Require that peer certificate was signed with explicit\n" " key usage and extended key usage based on TLS rules.\n" " t = 'client | 'server'.\n" |