vici: Directly provide CA certificates in authority sections

With the previous approach, CA certificates that were not re-loaded via
load-cert() (e.g. from tokens or via absolute paths) would not be available
anymore after the clear-creds() command was used.  This avoids this
issue, but can cause duplicate CA certificates to get stored and enumerated,
so there might be a scaling factor.
This commit is contained in:
Tobias Brunner
2020-07-20 14:05:38 +02:00
parent 306c0c9f8e
commit 46ff268885
3 changed files with 67 additions and 44 deletions
+1 -3
View File
@@ -46,10 +46,8 @@ struct vici_authority_t {
* Create a vici_authority instance.
*
* @param dispatcher dispatcher to receive requests from
* @param cred in-memory credential backend managed by VICI
* @return authority backend
*/
vici_authority_t *vici_authority_create(vici_dispatcher_t *dispatcher,
vici_cred_t *cred);
vici_authority_t *vici_authority_create(vici_dispatcher_t *dispatcher);
#endif /** VICI_AUTHORITY_H_ @}*/