As far as I know freeradius uses openssl to handle crls. openssl also has an option -use_deltas to enable support for delta CRLs. Is this option available in freeradius? According to eap.conf it is necessary to restart radiusd if a new version of a crl is published. Are there plans to enable reading of a new crl without restarting the server? Thanks Norbert Wegener
Hi,
Are there plans to enable reading of a new crl without restarting the server?
without severaly crippling performance, how? the RADIUS server would have to poll the CRL file all the time....and if it read a new file it would have to destroy its current array structure to import the new file details.....and if there was a buffer error or the file was half-way through being written etc then nastiness could ensue. I never understand the problem people have with doing a HUP or a service reload in this context. alan
participants (4)
-
alan buxey -
Alan DeKok -
Arran Cudbard-Bell -
Wegener, Norbert