]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Abort if CRL file can't be stat-ed in ssl_init
authorMax Fillinger <maximilian.fillinger@foxcrypto.com>
Thu, 15 Apr 2021 09:34:54 +0000 (11:34 +0200)
committerGert Doering <gert@greenie.muc.de>
Tue, 20 Apr 2021 11:15:04 +0000 (13:15 +0200)
commit940619c88067d95a1c9865795624bc3822a89bd7
treedc550f758d2e66ebe9bd9411e284e858be5ec937
parent21a0b2494e7f4f1c6325b2972743158acad4f394
Abort if CRL file can't be stat-ed in ssl_init

Now that the path for the CRL file is handled correctly when using
chroot, there's no good reason for the file to be inaccessible during
ssl_init().

This commit ensures that the CRL file is accessed successfully at least
once, which fixes a bug where the mbedtls version of OpenVPN wouldn't
use a reloaded CRL if it initially failed to access the file.

Signed-off-by: Max Fillinger <maximilian.fillinger@foxcrypto.com>
Acked-by: Antonio Quartulli <antonio@openvpn.net>
Message-Id: <20210415093454.18324-1-maximilian.fillinger@foxcrypto.com>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg22118.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/ssl.c