From: Michael Tremer <michael.tremer@ipfire.org>
Date: Fri, 7 Oct 2022 14:50:17 +0000 (+0000)
Subject: openvpnctrl: Update CRL before starting the client daemon
X-Git-Tag: v2.27-core172~219
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e420c103dede60f9c8121386b55e83314d176634;p=ipfire-2.x.git

openvpnctrl: Update CRL before starting the client daemon

If the CRL is outdated for some reason (e.g. a backup restored from ISO
where we don't run the migration scripts), this will update it on
reboot/restart of the service.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/misc-progs/openvpnctrl.c b/src/misc-progs/openvpnctrl.c
index b9e4fd2a65..92b5989e90 100644
--- a/src/misc-progs/openvpnctrl.c
+++ b/src/misc-progs/openvpnctrl.c
@@ -497,6 +497,8 @@ void startDaemon(void) {
 		fprintf(stderr, "OpenVPN is not enabled on any interface\n");
 		exit(1);
 	} else {
+		snprintf(command, STRING_SIZE-1, "/etc/fcron.daily/openvpn-crl-updater");
+		executeCommand(command);
 		snprintf(command, STRING_SIZE-1, "/sbin/modprobe tun");
 		executeCommand(command);
 		snprintf(command, STRING_SIZE-1, "/usr/sbin/openvpn --config /var/ipfire/ovpn/server.conf");