certficate filtering

Frank Liu fliu at tiger.openqnx.com
Wed Apr 2 07:33:10 PDT 2025


Hi team,

Is it possible to configure ocserv to filter the client certificate?
eg: only allow the connecting the CN of the client certificate ending with mytrusted.domain.com? matching certain regex filtering rules
Or running a script to further process the certificate based authentication, such as what openvpn has: https://github.com/OpenVPN/openvpn/blob/master/sample/sample-scripts/verify-cn

Thanks!
Frank




More information about the openconnect-devel mailing list