dns interceptors

[randy at psg.com (Randy Bush)]

end user to network

having probs with certs, i.e. what --outform it wants.  not finding in
docs.  tried raw, but now guessing pem.  same for client and server

server
  ca.crt
  server.crt
  server.key

client
  ca.crt
  client.crt
  client.key

and i presume i have to dump all client.crt files in the server's
../openvpn dir, but under what names?  or does it just wantonly trust
anyone under that ca?

randy