koozali
/
smeserver-openvpn-routed
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Make crl verification optional

This commit is contained in:
Daniel Berteaud 2015-09-29 11:42:30 +02:00
parent 36f5d2b782
commit c595fbe31a
1 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
root/etc/e-smith/templates/etc/openvpn/routed/openvpn.conf/30cert
View File

@ -7,11 +7,14 @@ tls-server
{
$OUT .= "tls-auth priv/takey.pem 0\n" if
(-e "/etc/openvpn/routed/priv/takey.pem" &&
!-z "/etc/openvpn/routed/priv/takey.pem");
if (-e "/etc/openvpn/routed/priv/takey.pem" &&
!-z "/etc/openvpn/routed/priv/takey.pem"){
$OUT .= "tls-auth priv/takey.pem 0\n";
}
# CRL file for certificates verification
crl-verify pub/cacrl.pem
if (-e '/etc/openvpn/routed/pub/cacrl.pem' &&
!-z '/etc/openvpn/routed/pub/cacrl.pem'){
$OUT .= "crl-verify pub/cacrl.pem\n";
}
}