mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

write out built-in CRLs for strongswan

Browse Source
This commit is contained in:
Chris Buechler 2015-07-22 13:05:22 -05:00
parent 8c378f3fd2
commit 5bded426ab
1 changed files with 18 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
etc/inc/vpn.inc
View File

@ -151,6 +151,7 @@ function vpn_ipsec_configure($restart = false) {
$certpath = "{$g['varetc_path']}/ipsec/ipsec.d/certs";
$capath = "{$g['varetc_path']}/ipsec/ipsec.d/cacerts";
$keypath = "{$g['varetc_path']}/ipsec/ipsec.d/private";
$crlpath = "{$g['varetc_path']}/ipsec/ipsec.d/crls";
mwexec("/sbin/ifconfig enc0 up");
set_single_sysctl("net.inet.ip.ipsec_in_use", "1");
@ -171,8 +172,8 @@ function vpn_ipsec_configure($restart = false) {
if (!is_dir($keypath)) {
mkdir($keypath);
}
if (!is_dir("{$g['varetc_path']}/ipsec/ipsec.d/crls")) {
mkdir("{$g['varetc_path']}/ipsec/ipsec.d/crls");
if (!is_dir($crlpath)) {
mkdir($crlpath);
}
if (!is_dir($certpath)) {
mkdir($certpath);
@ -584,6 +585,21 @@ EOD;
unset($cert);
}
}
/* write out CRL files */
if (is_array($config['crl']) && count($config['crl'])) {
foreach ($config['crl'] as $crl) {
if (!isset($crl['text'])) {
log_error(sprintf(gettext("Error: Invalid CRL data for %s"), $crl['descr']));
continue;
}
$fpath = "{$crlpath}/{$crl['refid']}.crl";
if (!@file_put_contents($fpath, base64_decode($crl['text']))) {
log_error(sprintf(gettext("Error: Cannot write IPsec CRL file for %s"), $crl['descr']));
continue;
}
}
}
$pskconf = "";