summaryrefslogtreecommitdiffstats
path: root/openvpn.8
diff options
context:
space:
mode:
Diffstat (limited to 'openvpn.8')
-rw-r--r--openvpn.813
1 files changed, 13 insertions, 0 deletions
diff --git a/openvpn.8 b/openvpn.8
index 45e61fa..4846d34 100644
--- a/openvpn.8
+++ b/openvpn.8
@@ -4258,6 +4258,14 @@ to
to build a command line which will be passed to the script.
.\"*********************************************************
.TP
+.B --tls-export-cert directory
+Store the certificates the clients uses upon connection to this
+directory. This will be done before --tls-verify is called. The
+certificates will use a temporary name and will be deleted when
+the tls-verify script returns. The file name used for the certificate
+is available via the peer_cert environment variable.
+.\"*********************************************************
+.TP
.B --tls-remote name
Accept connections only from a host with X509 name
or common name equal to
@@ -5242,6 +5250,11 @@ than their names as denoted on the command line
or configuration file.
.\"*********************************************************
.TP
+.B peer_cert
+Temporary file name containing the client certificate upon
+connection. Useful in conjunction with --tls-verify
+.\"*********************************************************
+.TP
.B script_context
Set to "init" or "restart" prior to up/down script execution.
For more information, see