From f3e1ec4a85dfb94d9774dc60f6a19d659712f8f6 Mon Sep 17 00:00:00 2001
From: Martin Willi <martin@revosec.ch>
Date: Tue, 29 Apr 2014 12:11:09 +0200
Subject: [PATCH] vici: Have an explicit "relaxed" keyword for the default
 revocation policy

---
 src/libcharon/plugins/vici/vici_config.c | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/libcharon/plugins/vici/vici_config.c b/src/libcharon/plugins/vici/vici_config.c
index bf6f88f1b..08cf92666 100644
--- a/src/libcharon/plugins/vici/vici_config.c
+++ b/src/libcharon/plugins/vici/vici_config.c
@@ -1025,12 +1025,16 @@ CALLBACK(parse_revocation, bool,
 	enum_map_t map[] = {
 		{ "strict",		VALIDATION_GOOD		},
 		{ "ifuri",		VALIDATION_SKIPPED	},
+		{ "relaxed",	VALIDATION_FAILED	},
 	};
 	int d;
 
 	if (parse_map(map, countof(map), &d, v))
 	{
-		cfg->add(cfg, AUTH_RULE_CRL_VALIDATION, d);
+		if (d != VALIDATION_FAILED)
+		{
+			cfg->add(cfg, AUTH_RULE_CRL_VALIDATION, d);
+		}
 		return TRUE;
 	}
 	return FALSE;