Hi James,
I do agree that forking and using a new port is a good solution due to
it's simplicity. And fork cost ain't much for normal traffic since it's
done only once per tunnel opening.
There could also be a limit for the speed new childs are forked. Since it
does not matter if it takes a while
Hello all,
I'm confusing with TLS Mode Options.
in Man Page:
--cert file Peer's signed certificate in .pem
--key file My private key in .pem
but in Example 3:
openvpn ... --cert client.crt --key client.key ...
openvpn ... --cert server.crt --key server.key ...
> Hi James,
>
> I do agree that forking and using a new port is a good solution due to
> it's simplicity. And fork cost ain't much for normal traffic since it's
> done only once per tunnel opening.
>
> There could also be a limit for the speed new childs are forked. Since it
> does not matter if it
> Hello all,
>
> I'm confusing with TLS Mode Options.
>
> in Man Page:
> --cert file Peer's signed certificate in .pem
> --key file My private key in .pem
> but in Example 3:
> openvpn ... --cert client.crt --key client.key ...
> openvpn ... --cert server.crt --key server.key ...
>
> OpenVPN 1.2