vici: Certification Authority support added.

CDP and OCSP URIs for a one or multiple certification authorities can be added via the VICI interface. swanctl allows to read definitions from a new authorities section.
2015-07-21 13:02:30 +02:00
parent e194349148
commit 63d370387d
19 changed files with 1553 additions and 15 deletions
@@ -1,3 +1,6 @@
+strongswan-5.3.3
+----------------
+
 - Added support for the ChaCha20/Poly1305 AEAD cipher specified in RFC7539 and
  draft-ietf-ipsecme-chacha20-poly1305 using the chacha20poly1305 ike/esp
  proposal keyword. The new chapoly plugin implements the cipher, optionally
@@ -5,6 +8,9 @@
  strongSwan libipsec ESP backend. On Linux 4.2 or newer the kernel-netlink
  plugin can configure the cipher for ESP SAs.

+- The vici interface now supports the configuration of auxiliary certification
+  authority information as CRL and OCSP URIs
+ 

 strongswan-5.3.2
 ----------------