From db45bc6892d013e6f8d2e997822f526aa13ed687 Mon Sep 17 00:00:00 2001
From: Chris Buechler <cmb@pfsense.org>
Date: Fri, 11 Apr 2014 19:33:42 -0500
Subject: [PATCH] tls-verify requires quotes around the command to be executed.
 Ticket #3596

---
 etc/inc/openvpn.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/etc/inc/openvpn.inc b/etc/inc/openvpn.inc
index 66ddf7e99c..684cf3bccb 100644
--- a/etc/inc/openvpn.inc
+++ b/etc/inc/openvpn.inc
@@ -595,7 +595,7 @@ function openvpn_reconfigure($mode, $settings) {
 			$cert = lookup_cert($settings['certref']);
 			/* XXX: Seems not used at all! */
 			$servercn = urlencode(cert_get_cn($cert['crt']));
-			$conf .= "tls-verify /usr/local/sbin/ovpn_auth_verify tls '{$servercn}' {$settings['cert_depth']} via-env\n";
+			$conf .= "tls-verify \"/usr/local/sbin/ovpn_auth_verify tls '{$servercn}' {$settings['cert_depth']} via-env\"\n";
 		}
 
 		// The local port to listen on