core/ui: add 'remote-cert-tls' option (bgo #685790)
authorJiří Klimeš <jklimes@redhat.com>
Fri, 2 Nov 2012 12:17:38 +0000 (13:17 +0100)
committerDan Williams <dcbw@redhat.com>
Wed, 7 Nov 2012 22:00:10 +0000 (16:00 -0600)
commit344b62b21b7bfdb9e7f20ea4278ae468d7130e5f
tree84bbac12b911d3d96fc84f8d1140e2808ade373d
parent4dbe430fb05595fdf89fbe72a975440d44e3b658
core/ui: add 'remote-cert-tls' option (bgo #685790)

We already support 'tls-remote', i.e. verifying server's X509/common name.
However, it make sense to support 'remote-cert-tls' as well.  It's another
important security option to protect against MITM attacks. For more info see
http://openvpn.net/index.php/open-source/documentation/howto.html#mitm
properties/auth-helpers.c
properties/import-export.c
properties/nm-openvpn-dialog.ui
properties/tests/conf/tls.ovpn
properties/tests/test-import-export.c
src/nm-openvpn-service.c
src/nm-openvpn-service.h