From 2db1578dfdba90b19626e42ebc560858893462af Mon Sep 17 00:00:00 2001
From: Renato Botelho do Couto <renato@netgate.com>
Date: Thu, 26 Sep 2019 10:00:47 -0300
Subject: [PATCH] Fix #9674: Do not set duplicate-cn in p2p_shared_key mode

---
 src/etc/inc/openvpn.inc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/etc/inc/openvpn.inc b/src/etc/inc/openvpn.inc
index 11727a6a8c..5db70d5587 100644
--- a/src/etc/inc/openvpn.inc
+++ b/src/etc/inc/openvpn.inc
@@ -1043,7 +1043,8 @@ function openvpn_reconfigure($mode, $settings) {
 				}
 				break;
 		}
-		if (isset($settings['duplicate_cn'])) {
+		if ($settings['mode'] != 'p2p_shared_key' &&
+		    isset($settings['duplicate_cn'])) {
 			$conf .= "duplicate-cn\n";
 		}
 	}