change client config to use tls-crypt instead of tls-auth

This commit is contained in:
lawtancool 2020-02-21 21:15:32 -08:00 committed by GitHub
parent 692d5cf54b
commit b6de5e4a40
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 4 deletions

View File

@ -58,17 +58,18 @@ $(openssl x509 -in $EASYRSA_PKI/issued/${cn}.crt)
<ca>
$(cat $EASYRSA_PKI/ca.crt)
</ca>
key-direction 1
<tls-auth>
#key-direction 1
<tls-crypt>
$(cat $EASYRSA_PKI/ta.key)
</tls-auth>
</tls-crypt>
"
elif [ "$mode" == "separated" ]; then
echo "
key ${cn}.key
ca ca.crt
cert ${cn}.crt
tls-auth ta.key 1
tls-crypt ta.key
#tls-auth ta.key 1
"
fi