summaryrefslogtreecommitdiffstats
path: root/etc/inc/openvpn.inc
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2011-07-13 17:16:07 -0400
committerjim-p <jimp@pfsense.org>2011-07-13 17:16:32 -0400
commitcfcc69946ca8ca1916ea5f6ee73aadd46966177a (patch)
tree921a04bc56dfc1723b6c0c1f3916ccfd952aab02 /etc/inc/openvpn.inc
parent4a79ec20cb254f378d61709991b28370ea7921d2 (diff)
downloadpfsense-cfcc69946ca8ca1916ea5f6ee73aadd46966177a.zip
pfsense-cfcc69946ca8ca1916ea5f6ee73aadd46966177a.tar.gz
CRL fixes for empty CRLs (so they don't kill OpenVPN)
Diffstat (limited to 'etc/inc/openvpn.inc')
-rw-r--r--etc/inc/openvpn.inc1
1 files changed, 1 insertions, 0 deletions
diff --git a/etc/inc/openvpn.inc b/etc/inc/openvpn.inc
index bf109f4..0555fca 100644
--- a/etc/inc/openvpn.inc
+++ b/etc/inc/openvpn.inc
@@ -562,6 +562,7 @@ function openvpn_reconfigure($mode, $settings) {
$conf .= "dh {$g['etc_path']}/dh-parameters.{$settings['dh_length']}\n";
if (!empty($settings['crlref'])) {
$crl = lookup_crl($settings['crlref']);
+ crl_update($crl);
openvpn_add_keyfile($crl['text'], $conf, $mode_id, "crl-verify");
}
if ($settings['tls']) {
OpenPOWER on IntegriCloud