mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Only write out the CA if one exists.

Browse Source
This commit is contained in:
jim-p 2010-08-13 14:03:23 -04:00
parent 812dd35db0
commit dc291feb70
1 changed files with 11 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
etc/inc/vpn.inc
View File

@ -536,20 +536,22 @@ function vpn_ipsec_configure($ipchg = false)
chmod($keypath, 0600);
$ca = lookup_ca($cert['caref']);
$cafile = "ca-".$ikeid.".crt";
$capath = $g['varetc_path']."/".$cafile;
if ($ca) {
$cafile = "ca-".$ikeid.".crt";
$capath = $g['varetc_path']."/".$cafile;
if (!file_put_contents($capath, base64_decode($ca['crt'])))
{
log_error("Error: Cannot write phase1 CA certificate file for {$ph1ent['name']}");
continue;
if (!file_put_contents($capath, base64_decode($ca['crt'])))
{
log_error("Error: Cannot write phase1 CA certificate file for {$ph1ent['name']}");
continue;
}
chmod($capath, 0600);
$caline = "ca_type x509 \"".basename($capath)."\";";
}
chmod($capath, 0600);
$certline = "certificate_type x509 \"".basename($certpath)."\" \"".basename($keypath)."\";";
$caline = "ca_type x509 \"".basename($capath)."\";";
}
$ealgos = '';