]> git.ipfire.org Git - thirdparty/openvpn.git/commit
In init_ssl, open the correct CRL path pre-chroot
authorMax Fillinger <maximilian.fillinger@foxcrypto.com>
Thu, 15 Apr 2021 09:12:48 +0000 (11:12 +0200)
committerGert Doering <gert@greenie.muc.de>
Tue, 20 Apr 2021 11:07:40 +0000 (13:07 +0200)
commit21a0b2494e7f4f1c6325b2972743158acad4f394
treecc52cc45696f314bad04a3a06bbdfcfa2fea0ab1
parenta005044be9ca77ee8a47cb65a603d0b1c41b99f4
In init_ssl, open the correct CRL path pre-chroot

When using the chroot option, the init_ssl function can be called before
entering the chroot or, when OpenVPN receives a SIGHUP, afterwards. This
commit ensures that OpenVPN tries to open the correct path for the CRL
file in either situation.

This commit does not address key and certificate files. For these, the
--persist-key option should be used.

Signed-off-by: Max Fillinger <maximilian.fillinger@foxcrypto.com>
Acked-by: Antonio Quartulli <antonio@openvpn.net>
Message-Id: <20210415091248.18149-1-maximilian.fillinger@foxcrypto.com>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg22117.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/init.c
src/openvpn/misc.c
src/openvpn/misc.h
src/openvpn/options.c
src/openvpn/ssl.c
src/openvpn/ssl.h