From 03e59623badc8b5df59846d0b00b08a9d178edf7 Mon Sep 17 00:00:00 2001
From: Franco Fichtner <franco@opnsense.org>
Date: Sun, 12 Mar 2017 11:08:10 +0100
Subject: [PATCH] openvpn: do not offer external CA for selection; closes #1467

---
 src/wizard/openvpn.xml | 1 +
 src/www/wizard.php     | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/src/wizard/openvpn.xml b/src/wizard/openvpn.xml
index 4000c9c39..0b75f4f7f 100644
--- a/src/wizard/openvpn.xml
+++ b/src/wizard/openvpn.xml
@@ -312,6 +312,7 @@
 		</field>
 		<field>
 			<type>certca_selection</type>
+			<internal>1</internal>
 			<name>certca</name>
 			<displayname>Certificate Authority</displayname>
 			<bindstofield>ovpnserver->step6->authcertca</bindstofield>
diff --git a/src/www/wizard.php b/src/www/wizard.php
index 39521448b..a64884b43 100644
--- a/src/www/wizard.php
+++ b/src/www/wizard.php
@@ -596,6 +596,9 @@ function showchange() {
 					echo "<option value='" . $field['add_to_certca_selection'] . "'" . $SELECTED . ">" . $field['add_to_certca_selection'] . "</option>\n";
 				}
 				foreach($config['ca'] as $ca) {
+					if (!empty($field['internal']) && empty($ca['prv'])) {
+						continue;
+					}
 					$name = htmlspecialchars($ca['descr']);
 					$SELECTED = "";
 					if ($value == $name) $SELECTED = " selected=\"selected\"";