]> git.ipfire.org Git - thirdparty/hostap.git/commit
crl_reload_interval: Add CRL reloading support
authorJared Bents <jared.bents@rockwellcollins.com>
Wed, 16 Jan 2019 15:15:01 +0000 (09:15 -0600)
committerJouni Malinen <j@w1.fi>
Sun, 27 Jan 2019 16:45:07 +0000 (18:45 +0200)
commit159a7fbdeafef10c79bbd2c205be4fdb35ee5c16
tree48849f4208dfe4e9e87c1febcfd1edbb4c3765f5
parent0eb34f8f2859e8d51d52c4e7781bdb135ba1b360
crl_reload_interval: Add CRL reloading support

This patch adds a new flag 'crl_reload_interval' to reload CRL
periodically. This can be used to reload ca_cert file and the included
CRL information on every new TLS session if difference between the last
reload and the current time in seconds is greater than
crl_reload_interval.

This reloading is used for cases where check_crl is 1 or 2 and the CRL
is included in the ca_file.

Signed-off-by: Paresh Chaudhary <paresh.chaudhary@rockwellcollins.com>
Signed-off-by: Jared Bents <jared.bents@rockwellcollins.com>
hostapd/config_file.c
hostapd/hostapd.conf
src/ap/ap_config.h
src/ap/authsrv.c
src/crypto/tls.h
src/crypto/tls_openssl.c