From 0d067d973a4d7a24abd086e33fef347a44d7770b Mon Sep 17 00:00:00 2001
From: Franco Fichtner <franco@opnsense.org>
Date: Thu, 14 Nov 2024 10:40:25 +0100
Subject: [PATCH] firmware: force CRL check on development deployment

---
 src/opnsense/scripts/firmware/config.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/opnsense/scripts/firmware/config.sh b/src/opnsense/scripts/firmware/config.sh
index 32458d01d..40342f9a6 100755
--- a/src/opnsense/scripts/firmware/config.sh
+++ b/src/opnsense/scripts/firmware/config.sh
@@ -86,7 +86,7 @@ fi
 # initialize environment to operate in
 env_init()
 {
-	if [ -n "$(opnsense-update -x)" ]; then
+	if [ -n "$(opnsense-update -x)" -o -e /var/run/development ]; then
 		# business mirror compliance requires
 		# disabling the use of TLS below 1.3
 		export SSL_NO_TLS1="yes"