lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-15 00:54:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

OpenVPN, cleanup tls-verify.php script

Browse Source
This commit is contained in:
Ad Schellevis 2018-04-20 17:06:01 +02:00
parent d23bc12e45
commit 07791dcb47
1 changed files with 1 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
src/etc/inc/plugins.inc.d/openvpn/tls-verify.php
View File

@ -3,6 +3,7 @@
/*
Copyright (C) 2011 Jim Pingle <jimp@pfsense.org>
Copyright (C) 2018 Deciso B.V.
All rights reserved.
Redistribution and use in source and binary forms, with or without
@ -35,35 +36,17 @@
* intermediates.
*/
require_once("config.inc");
require_once("interfaces.inc");
openlog("openvpn", LOG_ODELAY, LOG_AUTH);
/* read data from command line */
$cert_depth = intval($argv[1]);
$cert_subject = $argv[2];
/* Reserved for future use in case we decide to verify CNs and such as well
$subj = explode("/", $cert_subject);
foreach ($subj at $s) {
list($n, $v) = explode("=", $s);
if ($n == "CN")
$common_name = $v;
}
*/
/* Replaced by sed with proper variables used below ( $server_cn and $allowed_depth ). */
//<template>
if (isset($allowed_depth) && ($cert_depth > $allowed_depth)) {
syslog(LOG_WARNING, "Certificate depth {$cert_depth} exceeded max allowed depth of {$allowed_depth}.\n");
closelog();
exit(1);
}
// Debug
//syslog(LOG_WARNING, "Found certificate {$argv[2]} with depth {$cert_depth}\n");
closelog();
exit(0);