See the PacketFence FAQ or google for something like: macos lion ocsp crl
"captive portal"
We have the following in ~pf/conf/pf.conf in order to support the captive
portal and other local passthroughs. You only need the sites relevant to the
SSL certificate on your captive portal.
[trapping]
passthrough=proxy
[passthroughs]
crlthawte=http://crl.thawte.com
ocspthawte=http://ocsp.thawte.com
crlcomodo=http://crl.comodoca.com
ocspcomodo=http://ocsp.comodoca.com
crlincommon=http://crl.incommon.org
ocpincommon=http://ocsp.incommon.org
crlusertrust=http://crl.usertrust.com
ocspusertrust=http://ocsp.usertrust.com
msrcl=http://mscrl.microsoft.com
crlms=http://crl.microsoft.com
ocspapple=http://ocsp.apple.com
crlgeotrust=http://crl.geotrust.com
ocspdigicert=http://ocsp.digicert.com
ocspentrust=http://ocsp.digicert.com
svrintlver=http://svrintl-crl.verisign.com
ocspverisign=http://ocsp.verisign.com
--
Rich Graves http://claimid.com/rcgraves
Carleton.edu Sr UNIX and Security Admin
CMC135: 507-222-7079 Cell: 952-292-6529
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
