OpenVPN
Functions | Variables
extractcrl Namespace Reference

Functions

 measure_time (method)
 
 load_crl (filename, format)
 
 scan_dir (dirname)
 
 create_new_files (dirname, newset, oldset)
 
 remove_old_files (dirname, newset, oldset)
 
 check_crlfile (arg)
 
 check_outdir (arg)
 
 main ()
 

Variables

str FILETYPE_PEM = 'PEM'
 
str FILETYPE_DER = 'DER'
 

Detailed Description

Helper script for CRL (certificate revocation list) file extraction
to a directory containing files named as decimal serial numbers of
the revoked certificates, to be used with OpenVPN CRL directory
verify mode. To enable this mode, directory and 'dir' flag needs to
be specified as parameters of '--crl-verify' option.
For more information refer OpenVPN tls-options.rst.

Usage example:
    extractcrl.py -f pem /path/to/crl.pem /path/to/outdir
    extractcrl.py -f der /path/to/crl.crl /path/to/outdir
    cat /path/to/crl.pem | extractcrl.py -f pem - /path/to/outdir
    cat /path/to/crl.crl | extractcrl.py -f der - /path/to/outdir

Output example:
    Loaded:  309797 revoked certs in 4.136s
    Scanned: 312006 files in 0.61s
    Created: 475 files in 0.05s
    Removed: 2684 files in 0.116s

Function Documentation

◆ check_crlfile()

extractcrl.check_crlfile (   arg)

Definition at line 98 of file extractcrl.py.

Referenced by main().

◆ check_outdir()

extractcrl.check_outdir (   arg)

Definition at line 103 of file extractcrl.py.

Referenced by main().

◆ create_new_files()

extractcrl.create_new_files (   dirname,
  newset,
  oldset 
)

Definition at line 79 of file extractcrl.py.

Referenced by main().

◆ load_crl()

extractcrl.load_crl (   filename,
  format 
)

Definition at line 42 of file extractcrl.py.

Referenced by main().

◆ main()

extractcrl.main ( void  )

Definition at line 108 of file extractcrl.py.

References check_crlfile(), check_outdir(), create_new_files(), load_crl(), main(), remove_old_files(), and scan_dir().

Referenced by main().

◆ measure_time()

extractcrl.measure_time (   method)

Definition at line 34 of file extractcrl.py.

◆ remove_old_files()

extractcrl.remove_old_files (   dirname,
  newset,
  oldset 
)

Definition at line 89 of file extractcrl.py.

Referenced by main().

◆ scan_dir()

extractcrl.scan_dir (   dirname)

Definition at line 74 of file extractcrl.py.

Referenced by main().

Variable Documentation

◆ FILETYPE_DER

str extractcrl.FILETYPE_DER = 'DER'

Definition at line 32 of file extractcrl.py.

◆ FILETYPE_PEM

str extractcrl.FILETYPE_PEM = 'PEM'

Definition at line 31 of file extractcrl.py.