[SOLVED] OpenVPN: --ns-cert-type is DEPRECATED

[0xDEADC0DE]

When I connect with OpenVPN I get this warning:

Code Select Expand

WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.


pfSense fixed it already. Perhaps you can include the code.
https://forum.pfsense.org/index.php?topic=129676.0

I get many requests from my users about this warning. Currently I fixed it by manually
editing the config file.

[jorgevisentini]

Yes, I've been manually editing the ovpn file for some time.

At this notice it is because in the future this parameter will be changed in OpenVPN.

I believe development staff just need to change this parameter to generate automatically.

[franco]

Looks like one of those perfect times to be contributing small fixes to OPNsense. :D

But now here it is... https://github.com/opnsense/core/commit/73abc7c3d

# opnsense-patch 73abc7c3d

If you tell us that works it'll be in 17.7.4. But we still have time till 2.5 is out.


Cheers,
Franco

[jorgevisentini]

Hi Franco, it work!

Sorry for I dont contribute for project but I dont know php very much and I dont know the project and also I dont know use git lol  :'(

I would very much like to help in any way possible.

[franco]

Hi,

No worries, I just meant the change doesn't really require coding so is a good entry level challenge for contribution.

Reporting and testing is just as important. Thank you for this. I've added the patch for 17.7.4 and will mark this solved. :)


Cheers,
Franco

[0xDEADC0DE]

Thanks franco.  👍

[franco]

Thanks for the feedback, 17.7.4 hits tomorrow and we're all set as previously discussed.


Cheers,
Franco