]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Abort if CRL file can't be stat-ed in ssl_init
authorMax Fillinger <maximilian.fillinger@foxcrypto.com>
Thu, 15 Apr 2021 09:34:54 +0000 (11:34 +0200)
committerGert Doering <gert@greenie.muc.de>
Tue, 20 Apr 2021 11:17:08 +0000 (13:17 +0200)
commit8a06459d0c969b083377b63be16e5da1245ce0ee
treebe8c7f7a5800de9b81e3096c5b5566010bc50c1b
parentd91c14e815820d04c022677722f6f096b88770d6
Abort if CRL file can't be stat-ed in ssl_init

Now that the path for the CRL file is handled correctly when using
chroot, there's no good reason for the file to be inaccessible during
ssl_init().

This commit ensures that the CRL file is accessed successfully at least
once, which fixes a bug where the mbedtls version of OpenVPN wouldn't
use a reloaded CRL if it initially failed to access the file.

Signed-off-by: Max Fillinger <maximilian.fillinger@foxcrypto.com>
Acked-by: Antonio Quartulli <antonio@openvpn.net>
Message-Id: <20210415093454.18324-1-maximilian.fillinger@foxcrypto.com>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg22118.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
(cherry picked from commit 940619c88067d95a1c9865795624bc3822a89bd7)
src/openvpn/ssl.c