Added options to flush CRLs/X509 certs from the cert cache

src/stroke/stroke.c

@@ -286,6 +286,8 @@ static int reread(stroke_keyword_t kw)
 static int purge_flags[] = {
 	PURGE_OCSP,
 	PURGE_IKE,
+	PURGE_CRL,
+	PURGE_X509,
 };
 
 static int purge(stroke_keyword_t kw)
@@ -383,6 +385,10 @@ static void exit_usage(char *error)
 	printf("    stroke rereadsecrets|rereadcrls|rereadall\n");
 	printf("  Purge ocsp cache entries:\n");
 	printf("    stroke purgeocsp\n");
+	printf("  Purge CRL cache entries:\n");
+	printf("    stroke purgecrl\n");
+	printf("  Purge X509 cache entries:\n");
+	printf("    stroke purgex509\n");
 	printf("  Purge IKE_SAs without a CHILD_SA:\n");
 	printf("    stroke purgeike\n");
 	printf("  Export credentials to the console:\n");
@@ -508,6 +514,8 @@ int main(int argc, char *argv[])
 			res = reread(token->kw);
 			break;
 		case STROKE_PURGE_OCSP:
+		case STROKE_PURGE_CRL:
+		case STROKE_PURGE_X509:
 		case STROKE_PURGE_IKE:
 			res = purge(token->kw);
 			break;

src/stroke/stroke_keywords.h

@@ -49,6 +49,8 @@ typedef enum {
 	STROKE_REREAD_CRLS,
 	STROKE_REREAD_ALL,
 	STROKE_PURGE_OCSP,
+	STROKE_PURGE_CRL,
+	STROKE_PURGE_X509,
 	STROKE_PURGE_IKE,
 	STROKE_EXPORT_X509,
 	STROKE_LEASES,

src/stroke/stroke_keywords.txt

@@ -56,6 +56,8 @@ rereadacerts,    STROKE_REREAD_ACERTS
 rereadcrls,      STROKE_REREAD_CRLS
 rereadall,       STROKE_REREAD_ALL
 purgeocsp,       STROKE_PURGE_OCSP
+purgecrl,        STROKE_PURGE_CRL
+purgex509,       STROKE_PURGE_X509
 purgeike,        STROKE_PURGE_IKE
 exportx509,      STROKE_EXPORT_X509
 leases,          STROKE_LEASES

src/stroke/stroke_msg.h

@@ -107,6 +107,10 @@ enum purge_flag_t {
 	PURGE_OCSP =		0x0001,
 	/** purge IKE_SAs without a CHILD_SA */
 	PURGE_IKE =			0x0002,
+	/** purge CRL cache entries */
+	PURGE_CRL =			0x0004,
+	/** purge X509 cache entries */
+	PURGE_X509 =		0x0008,
 };
 
 typedef enum export_flag_t export_flag_t;