fix for crl

binhex · Jun 4, 2024 · aed4ec6 · aed4ec6
1 parent f9c0781
commit aed4ec6
Showing 1 changed file with 17 additions and 12 deletions.
diff --git a/run/root/start.sh b/run/root/start.sh
@@ -92,18 +92,6 @@ else
 
 		if [[ "${VPN_CLIENT}" == "openvpn" ]]; then
 
-			if [[ "${VPN_PROV}" == "pia" ]]; then
-
-				# turn off compression, required to bypass pia crl-verify issue with pia
-				# see https://github.com/binhex/arch-qbittorrentvpn/issues/233
-				sed -i -e 's~^compress~comp-lzo no~g' "${VPN_CONFIG}"
-
-				# remove crl-verify as pia verification has invalid date
-				# see https://github.com/binhex/arch-qbittorrentvpn/issues/233
-				sed -i '/<crl-verify>/,/<\/crl-verify>/d' "${VPN_CONFIG}"
-
-			fi
-
 			echo "[debug] Directory listing of files in /config/openvpn/ as follows" ; ls -al '/config/openvpn'
 			echo "[debug] Contents of OpenVPN config file '${VPN_CONFIG}' as follows..." ; cat "${VPN_CONFIG}"
 
@@ -121,6 +109,23 @@ else
 
 	fi
 
+	# workaround for pia CRL issue
+	if [[ "${VPN_CLIENT}" == "openvpn" ]]; then
+
+		if [[ "${VPN_PROV}" == "pia" ]]; then
+
+			# turn off compression, required to bypass pia crl-verify issue with pia
+			# see https://github.com/binhex/arch-qbittorrentvpn/issues/233
+			sed -i -e 's~^compress~comp-lzo no~g' "${VPN_CONFIG}"
+
+			# remove crl-verify as pia verification has invalid date
+			# see https://github.com/binhex/arch-qbittorrentvpn/issues/233
+			sed -i '/<crl-verify>/,/<\/crl-verify>/d' "${VPN_CONFIG}"
+
+		fi
+
+	fi
+
 	# split comma separated string into list from NAME_SERVERS env variable
 	IFS=',' read -ra name_server_list <<< "${NAME_SERVERS}"