aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorTobias Brunner <tobias@strongswan.org>2011-12-15 16:56:07 +0100
committerTobias Brunner <tobias@strongswan.org>2012-03-20 17:31:25 +0100
commit4bc4e8e17b5f6c00bc060376bfbd5dbd34e47d48 (patch)
tree096f172b2867233b6cdc9fdcbfac67a1ea09b267
parentf29a4f1c647151abc4a74d3ec4f029272ec0ec53 (diff)
downloadstrongswan-4bc4e8e17b5f6c00bc060376bfbd5dbd34e47d48.tar.bz2
strongswan-4bc4e8e17b5f6c00bc060376bfbd5dbd34e47d48.tar.xz
Added support for iKEIntermediate flag to ipsec pki.
-rw-r--r--src/pki/commands/issue.c4
-rw-r--r--src/pki/commands/print.c4
-rw-r--r--src/pki/commands/self.c4
3 files changed, 12 insertions, 0 deletions
diff --git a/src/pki/commands/issue.c b/src/pki/commands/issue.c
index 6a5686d92..97769fca6 100644
--- a/src/pki/commands/issue.c
+++ b/src/pki/commands/issue.c
@@ -229,6 +229,10 @@ static int issue()
{
flags |= X509_CLIENT_AUTH;
}
+ else if (streq(arg, "ikeIntermediate"))
+ {
+ flags |= X509_IKE_INTERMEDIATE;
+ }
else if (streq(arg, "crlSign"))
{
flags |= X509_CRL_SIGN;
diff --git a/src/pki/commands/print.c b/src/pki/commands/print.c
index ee6f30c98..2bc80f96b 100644
--- a/src/pki/commands/print.c
+++ b/src/pki/commands/print.c
@@ -133,6 +133,10 @@ static void print_x509(x509_t *x509)
{
printf("clientAuth ");
}
+ if (flags & X509_IKE_INTERMEDIATE)
+ {
+ printf("iKEIntermediate ");
+ }
if (flags & X509_SELF_SIGNED)
{
printf("self-signed ");
diff --git a/src/pki/commands/self.c b/src/pki/commands/self.c
index c7788ff62..7852d8594 100644
--- a/src/pki/commands/self.c
+++ b/src/pki/commands/self.c
@@ -212,6 +212,10 @@ static int self()
{
flags |= X509_CLIENT_AUTH;
}
+ else if (streq(arg, "ikeIntermediate"))
+ {
+ flags |= X509_IKE_INTERMEDIATE;
+ }
else if (streq(arg, "crlSign"))
{
flags |= X509_CRL_SIGN;