Re: [Openvpn-devel] [PATCH] x509 validity for tls-verify

2013-01-30 Thread David Sommerseth
On 30/01/13 14:07, Emmanuel Dreyfus wrote: Hi Please consider the attached patch that makes x509 xertificate validity (notBeofre and notAfter) available in environement for the tls-verify script. I use it to monitor OpenVPN certificate expirations in Nagios. I can share the Nagios bits with who

Re: [Openvpn-devel] [PATCH] x509 validity for tls-verify

2013-01-30 Thread Emmanuel Dreyfus
Gert Doering wrote: > Can this not be done with PolarSSL, or did you not investigate? I did not investigate, but I would be suprised if it would be difficult for someone knowledgable in PolarSSL. I have left it to be implemented by someone lese, I should have added a comment about that. -- Emm

Re: [Openvpn-devel] [PATCH] x509 validity for tls-verify

2013-01-30 Thread Gert Doering
Hi, On Wed, Jan 30, 2013 at 01:07:17PM +, Emmanuel Dreyfus wrote: > +++ src/openvpn/ssl_verify_polarssl.c 2013-01-30 09:37:42.0 +0100 > @@ -140,8 +140,21 @@ > >return buf; > } > > +char * > +x509_get_validity_notBefore (openvpn_x509_cert_t *cert, struct gc_arena *gc) > +{ > +