diff options
author | Davide Brini <dave_br@gmx.com> | 2010-04-27 12:20:05 +0100 |
---|---|---|
committer | David Sommerseth <dazo@users.sourceforge.net> | 2010-10-21 11:39:30 +0200 |
commit | 7d5e26cbb53e2700c966e6b6e815f0c824da8956 (patch) | |
tree | 5c0d1d9fc28478c67761d745cc06a4cc4b01b6d5 /images/.svnignore | |
parent | Fix missing /bin/bash -> /bin/sh (diff) | |
download | openvpn-7d5e26cbb53e2700c966e6b6e815f0c824da8956.tar.xz |
Fix certificate serial number export
contrib/OCSP_check/OCSP_check.sh:
New barebone script to demonstrate how to use $tls_serial_{n}
to perform simple OCSP queries using OpenSSL command line
"openssl ocsp". Minimal sanity checks to fail if user tries to
use it without customizing.
openvpn.8:
Added some notes about $tls_serial_{n} format and usage to the
existing description.
ssl.c:
correctly manage and export serial numbers of any size (as
parsed by OpenSSL) into the environment. Set to empty string
in case of errors, as 0 and negative numbers are all possible
(although illegal) certificate serial numbers. Use an OpenSSL
BIO object to do the job. Conforms to coding style guidelines.
See the discussion at
http://article.gmane.org/gmane.network.openvpn.devel/3588
for more details.
Signed-off-by: Davide Brini <dave_br@gmx.com>
Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
Acked-by: David Sommerseth <dazo@users.sourceforge.net>
Diffstat (limited to 'images/.svnignore')
0 files changed, 0 insertions, 0 deletions