Re: [PATCH] OpenVPN: Added needed directive for v2.4 update

[ummeegge <ummeegge@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 1198 bytes --]

Hi Michael,


Am Donnerstag, den 15.02.2018, 10:40 +0000 schrieb Michael Tremer:
> Hi,
> 
> this looks good. I will merge this soon.
> 
> How do we convert existing configuration files?

i would do it like this:

#!/bin/bash

# Changed and new OpenVPN-2.4 directives will wrote to server.conf and renew CRL while update an core update
if [ -e /var/ipfire/ovpn/server.conf ]; then
	if pgrep openvpn >/dev/null; then
		openvpnctrl -k
		sed -i -e 's/script-security 3 system/script-security 3/' -e '/status .*/ a ncp-disable' /var/ipfire/ovpn/server.conf
		openssl ca -gencrl -keyfile /var/ipfire/ovpn/ca/cakey.pem -cert /var/ipfire/ovpn/ca/cacert.pem -out /var/ipfire/ovpn/crls/cacrl.pem -config /var/ipfire/ovpn/openssl/ovpn.cnf
		openvpnctrl -s
	else
		sed -i -e 's/script-security 3 system/script-security 3/' -e '/status .*/ a ncp-disable' /var/ipfire/ovpn/server.conf
		openssl ca -gencrl -keyfile /var/ipfire/ovpn/ca/cakey.pem -cert /var/ipfire/ovpn/ca/cacert.pem -out /var/ipfire/ovpn/crls/cacrl.pem -config /var/ipfire/ovpn/openssl/ovpn.cnf
        fi
fi

# EOF


which includes also an update of the CRL to stay save also in that
manner


Best,

Erik