global-functions: $CertificateAvailable: warn about crl download to flash

Downloading certificate crls to flash can fill up all available space.
So warn about it!

1 files changed, 6 insertions, 0 deletions

diff --git a/global-functions b/global-functions
index 78c8a9f..9c58450 100644
--- a/global-functions
+++ b/global-functions
@@ -117,6 +117,12 @@
 
   :global CertificateDownload;
 
+  :if ([ / system resource get free-hdd-space ] < 8388608 && \
+       [ / certificate settings get crl-download ] = true && \
+       [ / certificate settings get crl-store ] = "system") do={
+    :log warn "This system has low free flash space but is configured to download certificate CRLs to system!";
+  }
+
   :if ([ / certificate print count-only where common-name=$CommonName ] = 0) do={
     :log info ("Certificate with CommonName \"" . $CommonName . "\" not available.");
     $CertificateDownload $CommonName;