Feature Request: Replace certificate name validation with peer certificate hash validation.

[ThEWiZaRd0fBsoD]

OpenVPN supports "equal" validation of fingerprints (hashes) between client and server, which provides stronger security than validating CA certificate names and certificate usage.

This setting can more effectively resist man-in-the-middle attacks (as attackers cannot mimic the SHA-256 hash values of both parties).

Reference: OpenVPN/fingerprint-authentication