OPNsense Forum

Archive => 21.7 Legacy Series => Topic started by: leacho73 on December 15, 2021, 01:04:41 PM

Title: CRL Storage Location
Post by: leacho73 on December 15, 2021, 01:04:41 PM
Hi All,

Does anyone know where the CRL's are stored in OpnSense once written to the file system, and is it possible to manually copy a new version over when an external CRL has been updated?

I have an external CA which generates and revokes certs via a number of scripts, and I would like to update the CRL every time that the external CA does by SCP'ing a new CRL file over to my OpnSense server.

Thanks
Leacho
Title: Re: CRL Storage Location
Post by: franco on December 15, 2021, 01:14:38 PM
The CRL implementation is internal and needs to be managed from the box as the system will generate a CRL based on what it knows, not what a CRL already compiled from somewhere else might contain.

The feature is really only used for a local CA giving out certificates for OpenVPN.


Cheers,
Franco
Title: Re: CRL Storage Location
Post by: leacho73 on December 15, 2021, 03:37:45 PM
Thanks @Franco - That could work actually

Do you know if there is a way via API or other method to automate the user creation and deletion for OpenVPN out of interest?

Cheers
Leacho