lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-13 08:09:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

firmware: stale CRL index if hosts changed

Browse Source
This commit is contained in:
Franco Fichtner 2024-11-05 13:05:19 +01:00
parent 323c094759
commit d91c77f633
1 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
src/opnsense/scripts/system/update-crl-fetch.py
View File

@ -68,14 +68,30 @@ def main(domains, target, lifetime):
crl_index = target + 'index'
crl_bundle = []
domains = sorted(set(domains))
current = ",".join(domains)
# assume we run under a firmware lock
if os.path.isfile(crl_index):
crl_stale = False
with open(crl_index, "r") as idx:
if idx.readline().strip('\n') != current:
crl_stale = True
fstat = os.stat(crl_index)
if (time.time() - fstat.st_mtime) < lifetime and fstat.st_size > 0:
if (time.time() - fstat.st_mtime) >= lifetime and fstat.st_size > 0:
crl_stale = True
if not crl_stale:
# failure means do not rehash now
exit(1)
os.unlink(crl_index)
with open(crl_index, 'a+') as sys.stdout:
print(current);
for fetched in fetch_certs(domains):
try:
dp_uri = None