diff options
author | jim-p <jimp@pfsense.org> | 2011-07-13 17:16:07 -0400 |
---|---|---|
committer | jim-p <jimp@pfsense.org> | 2011-07-13 17:17:57 -0400 |
commit | 2ce206b048e8496e84f732556219e18290c5481c (patch) | |
tree | 45693750487fbc47057f155a6380d8dc46902bd3 /etc/inc/openvpn.inc | |
parent | 0a81ee27e1eb02e5cd5126b7e2530c0b3f8e5f9e (diff) | |
download | pfsense-2ce206b048e8496e84f732556219e18290c5481c.zip pfsense-2ce206b048e8496e84f732556219e18290c5481c.tar.gz |
CRL fixes for empty CRLs (so they don't kill OpenVPN)
Diffstat (limited to 'etc/inc/openvpn.inc')
-rw-r--r-- | etc/inc/openvpn.inc | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/etc/inc/openvpn.inc b/etc/inc/openvpn.inc index c39bcc8..f45dda3 100644 --- a/etc/inc/openvpn.inc +++ b/etc/inc/openvpn.inc @@ -541,6 +541,7 @@ function openvpn_reconfigure($mode, $settings) { $conf .= "dh {$g['etc_path']}/dh-parameters.{$settings['dh_length']}\n"; if (!empty($settings['crlref'])) { $crl = lookup_crl($settings['crlref']); + crl_update($crl); openvpn_add_keyfile($crl['text'], $conf, $mode_id, "crl-verify"); } if ($settings['tls']) { |