up vote 2 down vote favorite
share [g+] share [fb]

Is this for security reason, or performance reason?

link|improve this question
86% accept rate
feedback

1 Answer

up vote 2 down vote accepted

Security reason.

With --duplicate-cn, two connections with same common name are allowed, so one cert can be used by more than one connection/users.

Without --duplicate-cn, every vpn cert must have their own CN, so every connection/user have one unique cert.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.