vici: flush-certs command flushes certificate cache

When fresh CRLs are released with a high update frequency (e.g.
every 24 hours) or OCSP is used then the certificate cache gets
quickly filled with stale CRLs or OCSP responses. The new VICI
flush-certs command allows to flush e.g. cached CRLs or OCSP
responses only. Without the type argument all kind of certificates
(e.g. also received end entity and intermediate CA certificates)
are purged.
This commit is contained in:
Andreas Steffen
2016-09-13 17:02:59 +02:00
parent 8efcc78f2b
commit 2c7cfe7630
9 changed files with 160 additions and 1 deletions
@@ -448,6 +448,12 @@ module Vici
@transp.request("get-conns").root
end
##
# Flush credential cache.
def flush_certs((match = nil)
check_success(@transp.request("flush-certs", Message.new(match)))
end
##
# Clear all loaded credentials.
def clear_creds()