tls-auth: Enable tls-auth for security
* Enabling tls-auth improves security and helps protect against DDoS.
This commit is contained in:
parent
1751d00fc9
commit
bc4165e587
@ -37,10 +37,10 @@ $(cat $EASYRSA_PKI/ca.crt)
|
||||
<dh>
|
||||
$(cat $EASYRSA_PKI/dh.pem)
|
||||
</dh>
|
||||
#<tls-auth>
|
||||
#$(echo cat $EASYRSA_PKI/ta.key)
|
||||
#</tls-auth>
|
||||
#key-direction 1
|
||||
<tls-auth>
|
||||
$(cat $EASYRSA_PKI/ta.key)
|
||||
</tls-auth>
|
||||
key-direction 1
|
||||
|
||||
<connection>
|
||||
remote $servername 1194 udp
|
||||
|
@ -44,8 +44,8 @@ key $EASYRSA_PKI/private/$cn.key
|
||||
ca $EASYRSA_PKI/ca.crt
|
||||
cert $EASYRSA_PKI/issued/$cn.crt
|
||||
dh $EASYRSA_PKI/dh.pem
|
||||
#tls-auth $EASYRSA_PKI/ta.key
|
||||
#key-direction 0
|
||||
tls-auth $EASYRSA_PKI/ta.key
|
||||
key-direction 0
|
||||
keepalive 10 60
|
||||
persist-key
|
||||
persist-tun
|
||||
|
Loading…
Reference in New Issue
Block a user