puppet-openvpn icon indicating copy to clipboard operation
puppet-openvpn copied to clipboard

add service-notify to scheduled crl_auto_renew exec

Open zivis opened this issue 4 years ago • 1 comments

Pull Request (PR) description

If using crl_auto_renew and the crl is recreated, the service has to be reloaded, otherwise clients can't connect if crl is getting verified. (seen on centos7)

This Pull Request (PR) fixes the following issues

no issue created, but i can if it helps

zivis avatar May 11 '21 14:05 zivis

Hello! Thanks for the PR.

According to the documentation when crl-verify is set, the crl file will be re-read every time a new client tries to connect.

So you can update the crl file without having to reload the deamon. Maybe the issue is somewhere else?

root-expert avatar Aug 06 '21 13:08 root-expert