Hi,

On Mon, May 17, 2021 at 02:57:32PM +0000, tincantech via Openvpn-devel wrote:
> I think it would useful to allow comment inside the <peer-fingerprint> 
> markers.

I've run across this as well, and share that sentiment.  It would be nice.

That said, I'm not sure how easy it is to implement (the inline-config
parser is used for all inline stuff, not only for peer-fingerprint).

> EG:
> 
> <peer-fingerprint>
> # alice
> 67:1F:A5:CA:26:98:BA:40:D9:EB:6A:5B:C1:64:8C:8E:66:6E:7A:22:26:73:96:6A:5E:9B:B3:17:8F:F8:C6:9C
> # bob
> 55:B6:3F:AD:BC:A0:8C:EF:00:B3:2F:A5:46:46:83:82:6F:34:86:8D:23:2B:AC:79:39:E2:26:0B:FC:1A:86:38
> </peer-fingerprint>

As a workaround, you can put "per user" peer-fingerprint lines into the 
config:

# alice
peer-fingerprint 
67:1F:A5:CA:26:98:BA:40:D9:EB:6A:5B:C1:64:8C:8E:66:6E:7A:22:26:73:96:6A:5E:9B:B3:17:8F:F8:C6:9C
# bob
peer-fingerprint 
55:B6:3F:AD:BC:A0:8C:EF:00:B3:2F:A5:46:46:83:82:6F:34:86:8D:23:2B:AC:79:39:E2:26:0B:FC:1A:86:38

the config option - and the inline block - can appear multiple times.

gert

-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             g...@greenie.muc.de

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to