denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added options to flush CRLs/X509 certs from the cert cache

Browse Source
This commit is contained in:
Martin Willi
2010-12-10 09:45:22 +01:00
parent 68fada37b1
commit 6aa144ddb7
6 changed files with 26 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/stroke/stroke.c
+8
View File
@@ -286,6 +286,8 @@ static int reread(stroke_keyword_t kw)
static int purge_flags[] = {
PURGE_OCSP,
PURGE_IKE,
PURGE_CRL,
PURGE_X509,
};
static int purge(stroke_keyword_t kw)
@@ -383,6 +385,10 @@ static void exit_usage(char *error)
printf(" stroke rereadsecrets|rereadcrls|rereadall\n");
printf(" Purge ocsp cache entries:\n");
printf(" stroke purgeocsp\n");
printf(" Purge CRL cache entries:\n");
printf(" stroke purgecrl\n");
printf(" Purge X509 cache entries:\n");
printf(" stroke purgex509\n");
printf(" Purge IKE_SAs without a CHILD_SA:\n");
printf(" stroke purgeike\n");
printf(" Export credentials to the console:\n");
@@ -508,6 +514,8 @@ int main(int argc, char *argv[])
res = reread(token->kw);
break;
case STROKE_PURGE_OCSP:
case STROKE_PURGE_CRL:
case STROKE_PURGE_X509:
case STROKE_PURGE_IKE:
res = purge(token->kw);
break;