denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

stroke: Purge existing CA/AA certificates during reread

Browse Source
This commit is contained in:
Martin Willi
2015-03-03 13:50:26 +01:00
parent d69cf39bb4
commit aba46b104e
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/stroke/stroke_cred.c
+4
View File
@@ -1381,6 +1381,8 @@ METHOD(stroke_cred_t, reread, void,
{ {
DBG1(DBG_CFG, "rereading ca certificates from '%s'", DBG1(DBG_CFG, "rereading ca certificates from '%s'",
CA_CERTIFICATE_DIR); CA_CERTIFICATE_DIR);
this->cacerts->clear(this->cacerts);
lib->credmgr->flush_cache(lib->credmgr, CERT_X509);
load_certdir(this, CA_CERTIFICATE_DIR, CERT_X509, X509_CA); load_certdir(this, CA_CERTIFICATE_DIR, CERT_X509, X509_CA);
} }
if (msg->reread.flags & REREAD_OCSPCERTS) if (msg->reread.flags & REREAD_OCSPCERTS)
@@ -1394,6 +1396,8 @@ METHOD(stroke_cred_t, reread, void,
{ {
DBG1(DBG_CFG, "rereading aa certificates from '%s'", DBG1(DBG_CFG, "rereading aa certificates from '%s'",
AA_CERTIFICATE_DIR); AA_CERTIFICATE_DIR);
this->aacerts->clear(this->aacerts);
lib->credmgr->flush_cache(lib->credmgr, CERT_X509);
load_certdir(this, AA_CERTIFICATE_DIR, CERT_X509, X509_AA); load_certdir(this, AA_CERTIFICATE_DIR, CERT_X509, X509_AA);
} }
if (msg->reread.flags & REREAD_ACERTS) if (msg->reread.flags & REREAD_ACERTS)