summaryrefslogtreecommitdiffstats
path: root/etc/inc/openvpn.inc
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2011-07-13 17:16:07 -0400
committerjim-p <jimp@pfsense.org>2011-07-13 17:17:57 -0400
commit2ce206b048e8496e84f732556219e18290c5481c (patch)
tree45693750487fbc47057f155a6380d8dc46902bd3 /etc/inc/openvpn.inc
parent0a81ee27e1eb02e5cd5126b7e2530c0b3f8e5f9e (diff)
downloadpfsense-2ce206b048e8496e84f732556219e18290c5481c.zip
pfsense-2ce206b048e8496e84f732556219e18290c5481c.tar.gz
CRL fixes for empty CRLs (so they don't kill OpenVPN)
Diffstat (limited to 'etc/inc/openvpn.inc')
-rw-r--r--etc/inc/openvpn.inc1
1 files changed, 1 insertions, 0 deletions
diff --git a/etc/inc/openvpn.inc b/etc/inc/openvpn.inc
index c39bcc8..f45dda3 100644
--- a/etc/inc/openvpn.inc
+++ b/etc/inc/openvpn.inc
@@ -541,6 +541,7 @@ function openvpn_reconfigure($mode, $settings) {
$conf .= "dh {$g['etc_path']}/dh-parameters.{$settings['dh_length']}\n";
if (!empty($settings['crlref'])) {
$crl = lookup_crl($settings['crlref']);
+ crl_update($crl);
openvpn_add_keyfile($crl['text'], $conf, $mode_id, "crl-verify");
}
if ($settings['tls']) {
OpenPOWER on IntegriCloud