Fill out sample rlm_crl module config

diff --git a/raddb/mods-available/crl b/raddb/mods-available/crl
index e69de29bb2d1d6434b8b29ae775ad8c2e48c5391..71f408cbca4e03dc76ebe4bd0fb83c2171e7bc4c 100644 (file)
--- a/raddb/mods-available/crl
+++ b/raddb/mods-available/crl
@@ -0,0 +1,28 @@
+#  -*- text -*-
+#
+#
+#  $Id$
+
+#######################################################################
+#
+#  = CRL Module
+#
+#  The `crl` module provides CRL checking of TLS certificates.
+#
+#  Its primary use case is within the `verify certificate` processing
+#  section of the `tls-session` virtual server when verifying client
+#  certificates during EAP-TLS.
+#
+
+#
+#  ## Configuration Settings
+#
+crl {
+       #
+       #  crl:: Expansion used to retrieve a CRL.
+       #
+       #  The CRL distribution point URI will be in the
+       #  attribute `CRL.CDP-URL` when this expansion is performed.
+       #
+       crl = %rest('GET', "%uri.safe(%{CRL.CDP-URL})")
+}