flnews-devel: Add new compile time option to CONFIG

[Michael Baeuerle <michael.baeuerle%stz-e.de@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Michael Baeuerle <michael.baeuerle%stz-e.de@localhost>
Pushed By:	micha
Date:		Fri Nov 15 13:32:29 2019 +0100
Changeset:	972c3dac2907bfd285e8509c881e1ee68d3e01e3

Modified Files:
	flnews-devel/files/CONFIG

Log Message:
flnews-devel: Add new compile time option to CONFIG

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=972c3dac2907bfd285e8509c881e1ee68d3e01e3

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 flnews-devel/files/CONFIG | 8 ++++++++
 1 file changed, 8 insertions(+)

diffs:
diff --git a/flnews-devel/files/CONFIG b/flnews-devel/files/CONFIG
index 1bf195f5fd..4358c73761 100644
--- a/flnews-devel/files/CONFIG
+++ b/flnews-devel/files/CONFIG
@@ -40,6 +40,14 @@ CFG_NLS_DISABLE=@NLS@
 # that underlaying libraries contain known security vulnerabilities
 # Set this to 1 if you don't want to get such warnings
 CFG_TLS_WARNING_DISABLE=1
+
+# The TLS module can use CRLs to check for revoked X.509 certificates
+# Usage and update interval can be configured via configfile (see manual page)
+# CRLs are downloaded automatically and must be available via HTTP protocol
+# (CRL distribution point entries in certificates)
+# Note: Not all CAs provide CRL distribution points in their certificates
+# Set this to 0 to check the whole chain for revoked certificates
+CFG_TLS_CRLS_DISABLE=0
 # ==============================================================================