From 801dce05fa593f61103a0e48d2175bcc58c061a0 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 29 Jan 2020 09:27:00 +0100
Subject: global-functions: $CertificateAvailable: warn about crl download to
 flash

Downloading certificate crls to flash can fill up all available space.
So warn about it!
---
 global-functions | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/global-functions b/global-functions
index 78c8a9f..9c58450 100644
--- a/global-functions
+++ b/global-functions
@@ -117,6 +117,12 @@
 
   :global CertificateDownload;
 
+  :if ([ / system resource get free-hdd-space ] < 8388608 && \
+       [ / certificate settings get crl-download ] = true && \
+       [ / certificate settings get crl-store ] = "system") do={
+    :log warn "This system has low free flash space but is configured to download certificate CRLs to system!";
+  }
+
   :if ([ / certificate print count-only where common-name=$CommonName ] = 0) do={
     :log info ("Certificate with CommonName \"" . $CommonName . "\" not available.");
     $CertificateDownload $CommonName;
-- 
cgit v1.2.3-54-g00ecf