From: Nick Porter <nick@portercomputing.co.uk>
Date: Wed, 28 May 2025 19:24:04 +0000 (+0100)
Subject: Fill out sample rlm_crl module config
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f4f9ca2d699b9e5144f25358d16882f255bcedbf;p=thirdparty%2Ffreeradius-server.git

Fill out sample rlm_crl module config
---

diff --git a/raddb/mods-available/crl b/raddb/mods-available/crl
index e69de29bb2d..71f408cbca4 100644
--- a/raddb/mods-available/crl
+++ b/raddb/mods-available/crl
@@ -0,0 +1,28 @@
+#  -*- text -*-
+#
+#
+#  $Id$
+
+#######################################################################
+#
+#  = CRL Module
+#
+#  The `crl` module provides CRL checking of TLS certificates.
+#
+#  Its primary use case is within the `verify certificate` processing
+#  section of the `tls-session` virtual server when verifying client
+#  certificates during EAP-TLS.
+#
+
+#
+#  ## Configuration Settings
+#
+crl {
+	#
+	#  crl:: Expansion used to retrieve a CRL.
+	#
+	#  The CRL distribution point URI will be in the
+	#  attribute `CRL.CDP-URL` when this expansion is performed.
+	#
+	crl = %rest('GET', "%uri.safe(%{CRL.CDP-URL})")
+}