-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 01/03/10 06:31, Karl O. Pinc wrote: > From: Karl O. Pinc <k...@mofo.meme.com> > > --- > openvpn.8 | 22 +++++++++++++--------- > 1 files changed, 13 insertions(+), 9 deletions(-) > > diff --git a/openvpn.8 b/openvpn.8 > index f1612a7..0150ba7 100644 > --- a/openvpn.8 > +++ b/openvpn.8 > @@ -4232,11 +4232,23 @@ test). > > .B cmd > should return 0 to allow the TLS handshake to proceed, or 1 to fail. > + > +Note that > +.B cmd > +may contain whitespace (if enclosed in quotes), in which case the first > +word of > +.B cmd > +is the shell command to execute and the remaining words are its > +arguments. > +When > .B cmd > -is executed as > +is executed it is passed two (additional) arguments, as follows: > > .B cmd certificate_depth X509_NAME_oneline > > +These arguments are, respectively, the current certificate depth and > +the X509 common name (cn) of the peer. > + > This feature is useful if the peer you want to trust has a certificate > which was signed by a certificate authority who also signed many > other certificates, where you don't necessarily want to trust all of them, > @@ -4250,14 +4262,6 @@ in the OpenVPN distribution. > > See the "Environmental Variables" section below for > additional parameters passed as environmental variables. > - > -Note that > -.B cmd > -can be a shell command with multiple arguments, in which > -case all OpenVPN-generated arguments will be appended > -to > -.B cmd > -to build a command line which will be passed to the script. > .\"********************************************************* > .TP > .B --tls-remote name
Applied to the feat_misc branch, to be merged into allmerged. Commit 87afefff8fe7b43b2c5cbba7a03a887fd9c02336 kind regards, David Sommerseth -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkuNeSIACgkQDC186MBRfrpQ8gCaAgcQzeBkUQ6gxEi0SqRy/rxT XboAn3QVnkJ94Q2TLBCNfuRLQL660Dm5 =0x96 -----END PGP SIGNATURE-----