]> git.ipfire.org Git - thirdparty/openvpn.git/commit
reload CRL only if file was modified
authorAntonio Quartulli <a@unstable.cc>
Thu, 1 Dec 2016 10:41:45 +0000 (18:41 +0800)
committerGert Doering <gert@greenie.muc.de>
Thu, 1 Dec 2016 10:55:43 +0000 (11:55 +0100)
commitce91c187ee0dd73aa4dbe4468181db90403951ce
tree8bd56c4305f0d18bc8d307a346a4c803856f497a
parentfb56058a98dcc81b34cffbdc46417d672b8926e1
reload CRL only if file was modified

In order to prevent annoying delays upon client connection,
reload the CRL file only if it was modified since the last
reload operation.
If not, keep on using the already stored CRL.

This change will boost client connection time in instances
where the CRL file is quite large (dropping from several
seconds to few milliseconds).

Cc: Steffan Karger <steffan.karger@fox-it.com>
Signed-off-by: Antonio Quartulli <a@unstable.cc>
Acked-by: Steffan Karger <steffan.karger@fox-it.com>
Message-Id: <20161201104145.23821-1-a@unstable.cc>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg13345.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
Changes.rst
src/openvpn/ssl.c
src/openvpn/ssl_backend.h
src/openvpn/ssl_mbedtls.c
src/openvpn/ssl_mbedtls.h
src/openvpn/ssl_openssl.c
src/openvpn/ssl_openssl.h