denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

vici: flush-certs command flushes certificate cache

Browse Source 
When fresh CRLs are released with a high update frequency (e.g.
every 24 hours) or OCSP is used then the certificate cache gets
quickly filled with stale CRLs or OCSP responses. The new VICI
flush-certs command allows to flush e.g. cached CRLs or OCSP
responses only. Without the type argument all kind of certificates
(e.g. also received end entity and intermediate CA certificates)
are purged.
This commit is contained in:
Andreas Steffen
2016-09-13 17:02:59 +02:00
parent 8efcc78f2b
commit 2c7cfe7630
9 changed files with 160 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/vici/perl/Vici-Session/README.pod
+15
View File
@@ -560,6 +560,21 @@ print "----- unload-authority -----\n";
($res, $errmsg) = $session->unload_authority(Vici::Message->new(\%vars));
print $res ? "ok\n" : "failed: $errmsg\n";
=item flush_certs()
flushes the volatile certificate cache. Optionally only a given certificate
type is flushed.
my %vars = ( type => 'x509_crl' );
my ($res, $errmsg) = $session->flush_certs(Vici::Message->new(\%vars));
=cut
print "----- flush-certs -----\n";
%vars = ( type => 'x509_crl' );
($res, $errmsg) = $session->flush_certs(Vici::Message->new(\%vars));
print $res ? "ok\n" : "failed: $errmsg\n";
=item clear_creds()
clears all loaded certificate, private key and shared key credentials. This