]> git.ipfire.org Git - ipfire-2.x.git/commitdiff
openvpnctrl: Update CRL before starting the client daemon
authorMichael Tremer <michael.tremer@ipfire.org>
Fri, 7 Oct 2022 14:50:17 +0000 (14:50 +0000)
committerPeter Müller <peter.mueller@ipfire.org>
Mon, 24 Oct 2022 09:06:16 +0000 (09:06 +0000)
If the CRL is outdated for some reason (e.g. a backup restored from ISO
where we don't run the migration scripts), this will update it on
reboot/restart of the service.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
src/misc-progs/openvpnctrl.c

index b9e4fd2a6564073f864488d5f25844c200cd3d86..92b5989e9005f73e58947a1c419efb49dd32b317 100644 (file)
@@ -497,6 +497,8 @@ void startDaemon(void) {
                fprintf(stderr, "OpenVPN is not enabled on any interface\n");
                exit(1);
        } else {
+               snprintf(command, STRING_SIZE-1, "/etc/fcron.daily/openvpn-crl-updater");
+               executeCommand(command);
                snprintf(command, STRING_SIZE-1, "/sbin/modprobe tun");
                executeCommand(command);
                snprintf(command, STRING_SIZE-1, "/usr/sbin/openvpn --config /var/ipfire/ovpn/server.conf");