Added options to flush CRLs/X509 certs from the cert cache

src/stroke/stroke_msg.h

@@ -107,6 +107,10 @@ enum purge_flag_t {
 	PURGE_OCSP =		0x0001,
 	/** purge IKE_SAs without a CHILD_SA */
 	PURGE_IKE =			0x0002,
+	/** purge CRL cache entries */
+	PURGE_CRL =			0x0004,
+	/** purge X509 cache entries */
+	PURGE_X509 =		0x0008,
 };
 
 typedef enum export_flag_t export_flag_t;