Changes between Version 3 and Version 4 of SandBox


Ignore:
Timestamp:
04/22/17 17:18:08 (7 years ago)
Author:
tct
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • SandBox

    v3 v4  
    1 = The Sandbox =
     1= ''The Sandbox'' =
     2''Please feel free to edit, improve and correct.''
    23
    3 This is just a page to practice and learn WikiFormatting.
     4----
    45
    5 Go ahead, edit it freely.
     6= OpenVPN 2.4 new Certificate Revocation List method. =
     7
     8Processing the Certificate Revocation List (CRL) in OpenVPN 2.4 is now handled by the Crypto Library with which OpenVPN has been built.  This means the list is processed much more rigidly than before.
     9(Previously, in OpenVPN 2.3, a ''built-in'' check was used).
     10
     11Specifically, the Crypto Library (Usually OpenSSL) will check '''all''' fields,  this check includes the `nextUpdate` field and CRLs with an expired `nextUpdate` field are flagged as '''expired''' by OpenSSL (The ''built-in'' check in OpenVPN 2.3 did not check this field).
     12
     13In order to fix this, regenerate the CRL with a new `nextUpdate` value.  If you don't want your CRLs
     14expire put that value far enough into the future.
     15
     16Using [https://github.com/OpenVPN/easy-rsa/releases EasyRSA] a new CRL can be generated with `./easyrsa gen-crl`