@@ -1670,7 +1670,8 @@ do_option_warnings (struct context *c)

   if (o->tls_client

       && !o->tls_verify

       && !o->tls_remote

-      && !(o->ns_cert_type & NS_SSL_SERVER))

+      && !(o->ns_cert_type & NS_SSL_SERVER)

+      && !o->remote_cert_eku[0])

     msg (M_WARN, "WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.");

 #endif

 #endif