Hello Alexey,
To have the "TLS Allowed CN" working, you must have the "TSL Verify Peer =
yes":
"In the case this directive is configured on a server side, the allowed CN
list will not be checked if *TLS Verify Peer* is set to *no* (*TLS Verify
Peer* is *yes* by default)."
The Address directive c
Hi!
I am updating the bacula version from 9.6 to 11.0.
In version 11 changed TLS Encryption certificate verification:
*Additionally, the client's X509 certificate Common Name must meet the
value of the Address directive (new in 11 verison). If the TLS Allowed CN
configuration directive is used, th