summaryrefslogtreecommitdiffstats
path: root/usr/local/www/system_crlmanager.php
diff options
context:
space:
mode:
authorChris Buechler <cmb@pfsense.org>2015-07-23 00:20:46 -0500
committerChris Buechler <cmb@pfsense.org>2015-07-23 00:21:23 -0500
commit6141f51ac4bdf1a107754dc2b3f1f708957c5dd4 (patch)
tree49c9e930b96ecf1a0297479800088c4632ce1bca /usr/local/www/system_crlmanager.php
parent1d3c9c9f3b67e5aadb07d1b15806451d43708574 (diff)
downloadpfsense-6141f51ac4bdf1a107754dc2b3f1f708957c5dd4.zip
pfsense-6141f51ac4bdf1a107754dc2b3f1f708957c5dd4.tar.gz
When a CRL is updated, refresh strongswan's CRLs.
Diffstat (limited to 'usr/local/www/system_crlmanager.php')
-rw-r--r--usr/local/www/system_crlmanager.php6
1 files changed, 6 insertions, 0 deletions
diff --git a/usr/local/www/system_crlmanager.php b/usr/local/www/system_crlmanager.php
index 0198d84..2a46a39 100644
--- a/usr/local/www/system_crlmanager.php
+++ b/usr/local/www/system_crlmanager.php
@@ -160,7 +160,9 @@ if ($act == "addcert") {
if (!$input_errors) {
$reason = (empty($pconfig['crlreason'])) ? OCSP_REVOKED_STATUS_UNSPECIFIED : $pconfig['crlreason'];
cert_revoke($cert, $crl, $reason);
+ // refresh IPsec and OpenVPN CRLs
openvpn_refresh_crls();
+ vpn_ipsec_configure();
write_config("Revoked cert {$cert['descr']} in CRL {$crl['descr']}.");
pfSenseHeader("system_crlmanager.php");
exit;
@@ -188,7 +190,9 @@ if ($act == "delcert") {
$crlname = htmlspecialchars($thiscrl['descr']);
if (cert_unrevoke($thiscert, $thiscrl)) {
$savemsg = sprintf(gettext("Deleted Certificate %s from CRL %s"), $certname, $crlname) . "<br />";
+ // refresh IPsec and OpenVPN CRLs
openvpn_refresh_crls();
+ vpn_ipsec_configure();
write_config(sprintf(gettext("Deleted Certificate %s from CRL %s"), $certname, $crlname));
} else {
$savemsg = sprintf(gettext("Failed to delete Certificate %s from CRL %s"), $certname, $crlname) . "<br />";
@@ -258,7 +262,9 @@ if ($_POST) {
}
write_config("Saved CRL {$crl['descr']}");
+ // refresh IPsec and OpenVPN CRLs
openvpn_refresh_crls();
+ vpn_ipsec_configure();
pfSenseHeader("system_crlmanager.php");
}
}
OpenPOWER on IntegriCloud