Skip to contentSkip to conversation

Add note about file permissions and --crl-verify to manpage.

PATCH In review Gert Doering 2 participants 3 messages May 2, 2015

lore
Share & tools
lore

Gert Doering

author
#0 lore raw

PATCH 1/1 Add note about file permissions and --crl-verify to manpage.

Trac #522

Signed-off-by Gert Doering <[email protected]...>
---
 doc/openvpn.8 | 5 +++++
 1 file changed, 5 insertions(+)
doc/openvpn.8 +5 -0
index 587b769..24f05bb 100644
@@ -5068,6 +5068,11 @@ is a directory containing files named as revoked serial numbers
 requests a connection, where the client certificate serial number
 (decimal string) is the name of a file present in the directory,
 it will be rejected.
+
+Note: As the crl file (or directory) is read every time a peer connects, 
+if you are dropping root privileges with
+.B --user, 
+make sure that this user has sufficient privileges to read the file.
 .\"*********************************************************
 .SS SSL Library information:
 .\"*********************************************************
Signature · 1 line
2.0.5
#1 lore raw
Quoted 14 lines · Gert Doering

Trac #522

Signed-off-by Gert Doering <[email protected]...>
---
  doc/openvpn.8 | 5 +++++
  1 file changed, 5 insertions(+)
doc/openvpn.8 +0 -0
index 587b769..24f05bb 100644
@@ -5068,6 +5068,11 @@ is a directory containing files named as revoked serial numbers
  requests a connection, where the client certificate serial number

doc/openvpn.8 is a directory containing files named as revoked serial numbers · line 5078

Quoted 10 lines
doc/openvpn.8 +5 -0
  (decimal string) is the name of a file present in the directory,
  it will be rejected.
+
+Note: As the crl file (or directory) is read every time a peer connects,
+if you are dropping root privileges with
+.B --user,
+make sure that this user has sufficient privileges to read the file.
  .\"*********************************************************
  .SS SSL Library information:
  .\"*********************************************************

ACK

-Steffan

author
#2 lore raw
In reply to Gert Doering

Patch has been applied to the master and release/2.3 branch.

commit d55be0fb8091ff03af1319a27f68401d31ce8571 (master) commit 755e12fddf32e6e2bbfce0157d9f17e8f1ff5eb5 (release/2.3)

Author: Gert Doering
Date:   Sat May 2 21:07:05 2015 +0200
     Add note about file permissions and --crl-verify to manpage.

     Signed-off-by: Gert Doering <[email protected]...>
     Acked-by: Steffan Karger <[email protected]...>
     Message-Id: <[email protected]...>
     URL: http://article.gmane.org/gmane.network.openvpn.devel/9634

--
kind regards,

Gert Doering