netbird/plugins
0
0
Fork 0
mirror of https://github.com/netbirdio/plugins.git synced 2026-05-22 18:44:07 -07:00
Code Issues Packages Projects Releases Wiki Activity

security/stunnel - flush CRL when requested, the code persist the CRL was isolated in https://github.com/opnsense/core/commit/7fec5111bdbd50e80944aa8f808fe6f26e9a9441, the old openssl_crl_* functions where deprecated some time ago. closes https://github.com/opnsense/plugins/issues/3401

Browse Source
This commit is contained in:
Ad Schellevis
2023-04-22 18:26:04 +02:00
parent f920b48a94
commit 244833b867
1 changed files with 3 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
security/stunnel/src/etc/inc/plugins.inc.d/stunnel.inc
+3 -13
View File
@@ -94,24 +94,14 @@ function stunnel_refresh_crls()
proc_close($process);
}
if ($ca_hash) {
$crlres = openssl_crl_new($ca_crt, 0, 9999);
if (!empty($configObj->crl)) {
foreach ($configObj->crl as $crl) {
if ($crl->caref == $cacert && !empty((string)$crl->cert)) {
foreach ($crl->cert as $cert) {
openssl_crl_revoke_cert(
$crlres,
base64_decode((string)$cert->crt),
(string)$cert->revoke_time,
(string)$cert->reason
);
}
if ($crl->caref == $cacert && !empty((string)$crl->text)) {
file_put_contents("/var/run/stunnel/certs/{$ca_hash}.r0", (string)$crl->text);
break;
}
}
}
$crl_text = "";
openssl_crl_export($crlres, $crl_text, $ca_key);
file_put_contents("/var/run/stunnel/certs/{$ca_hash}.r0", $crl_text);
}
}
}