summaryrefslogtreecommitdiffstats
path: root/usr/local/www/vpn_openvpn_server.php
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2010-09-21 15:39:57 -0400
committerjim-p <jimp@pfsense.org>2010-09-21 15:39:57 -0400
commit6db0238173e36182f2abc4dfcdda3a7c05babd11 (patch)
tree26468c2a130b4451d07dcb0332a46aa5f942ffb6 /usr/local/www/vpn_openvpn_server.php
parentc492948a820e7b8e6fc34cee099309307a4d3f7b (diff)
downloadpfsense-6db0238173e36182f2abc4dfcdda3a7c05babd11.zip
pfsense-6db0238173e36182f2abc4dfcdda3a7c05babd11.tar.gz
Allow selecting an OpenVPN Server CRL if we are in an SSL mode.
Diffstat (limited to 'usr/local/www/vpn_openvpn_server.php')
-rw-r--r--usr/local/www/vpn_openvpn_server.php22
1 files changed, 22 insertions, 0 deletions
diff --git a/usr/local/www/vpn_openvpn_server.php b/usr/local/www/vpn_openvpn_server.php
index e3dc858..d05522d 100644
--- a/usr/local/www/vpn_openvpn_server.php
+++ b/usr/local/www/vpn_openvpn_server.php
@@ -99,6 +99,7 @@ if($_GET['act']=="edit"){
$pconfig['tls'] = base64_decode($a_server[$id]['tls']);
}
$pconfig['caref'] = $a_server[$id]['caref'];
+ $pconfig['crlref'] = $a_server[$id]['crlref'];
$pconfig['certref'] = $a_server[$id]['certref'];
$pconfig['dh_length'] = $a_server[$id]['dh_length'];
} else
@@ -291,6 +292,7 @@ if ($_POST) {
$server['tls'] = base64_encode($pconfig['tls']);
}
$server['caref'] = $pconfig['caref'];
+ $server['crlref'] = $pconfig['crlref'];
$server['certref'] = $pconfig['certref'];
$server['dh_length'] = $pconfig['dh_length'];
} else {
@@ -374,6 +376,7 @@ function mode_change() {
case "server_tls_user":
document.getElementById("tls").style.display="";
document.getElementById("tls_ca").style.display="";
+ document.getElementById("tls_crl").style.display="";
document.getElementById("tls_cert").style.display="";
document.getElementById("tls_dh").style.display="";
document.getElementById("psk").style.display="none";
@@ -381,6 +384,7 @@ function mode_change() {
case "p2p_shared_key":
document.getElementById("tls").style.display="none";
document.getElementById("tls_ca").style.display="none";
+ document.getElementById("tls_crl").style.display="none";
document.getElementById("tls_cert").style.display="none";
document.getElementById("tls_dh").style.display="none";
document.getElementById("psk").style.display="";
@@ -708,6 +712,24 @@ function netbios_change() {
</select>
</td>
</tr>
+ <tr id="tls_crl">
+ <td width="22%" valign="top" class="vncellreq"><?=gettext("Peer Certificate Revocation List"); ?></td>
+ <td width="78%" class="vtable">
+ <select name='crlref' class="formselect">
+ <option value="">None</option>
+ <?php
+ foreach ($config['crl'] as $crl):
+ if (is_crl_internal($crl) && (count($crl['cert']) <= 0))
+ continue;
+ $selected = "";
+ if ($pconfig['crlref'] == $crl['refid'])
+ $selected = "selected";
+ ?>
+ <option value="<?=$crl['refid'];?>" <?=$selected;?>><?=$crl['name'];?></option>
+ <?php endforeach; ?>
+ </select>
+ </td>
+ </tr>
<tr id="tls_cert">
<td width="22%" valign="top" class="vncellreq"><?=gettext("Server Certificate"); ?></td>
<td width="78%" class="vtable">
OpenPOWER on IntegriCloud