]> git.ipfire.org Git - thirdparty/openvpn.git/commit
man: correct the description of --capath and --crl-verify regarding CRLs
authorMichal Soltys <soltys@ziu.info>
Tue, 9 Apr 2019 14:34:38 +0000 (16:34 +0200)
committerGert Doering <gert@greenie.muc.de>
Sun, 23 Jun 2019 19:12:24 +0000 (21:12 +0200)
commit3f72b838fd505dbd898cced364a655eef08a8c27
treec341355cb26e15bd1b092a3f44829149388463f7
parent0c1cc8d65539f5e156866056df9074d47bc3ed4b
man: correct the description of --capath and --crl-verify regarding CRLs

The man page states that when using --capath, the user is required to
provide CRLs for CAs. This is not true and providing CRLs is optional -
both in case of --capath as well as --crl-verify options. When relevant
CRL is not found OpenVPN simply logs the warning in the logs while
allowing the connection, e.g.:

VERIFY WARNING: depth=0, unable to get certificate CRL

This patch clarifies the behavior.

Signed-off-by: Michal Soltys <soltys@ziu.info>
Acked-by: Arne Schwabe <arne@rfc2549.org>
Message-Id: <20190409143438.25348-2-soltys@ziu.info>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg18343.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
(cherry picked from commit b3cfc43da3583ae8aa761beb29f016311b2ba64f)
doc/openvpn.8