From 4cfd15a94a97445d1334ad87bddf0c3700f74bf2 Mon Sep 17 00:00:00 2001
From: jim-p <jimp@pfsense.org>
Date: Tue, 3 Jan 2017 11:47:20 -0500
Subject: Replace "client-cert-not-required" with "verify-client-cert none".
 Fixes #7073

---
 src/etc/inc/openvpn.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src/etc')

diff --git a/src/etc/inc/openvpn.inc b/src/etc/inc/openvpn.inc
index 6c24186..f46d3b3 100644
--- a/src/etc/inc/openvpn.inc
+++ b/src/etc/inc/openvpn.inc
@@ -877,7 +877,7 @@ function openvpn_reconfigure($mode, $settings) {
 		// configure user auth modes
 		switch ($settings['mode']) {
 			case 'server_user':
-				$conf .= "client-cert-not-required\n";
+				$conf .= "verify-client-cert none\n";
 			case 'server_tls_user':
 				/* username-as-common-name is not compatible with server-bridge */
 				if (stristr($conf, "server-bridge") === false) {
-- 
cgit v1.1