diff options
| author | Martin Willi <martin@revosec.ch> | 2015-02-06 12:43:33 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2015-03-03 13:50:26 +0100 |
| commit | 11c14bd2f516975670d9f04c51b54438730fa64d (patch) | |
| tree | a23aa3009be8f3e0a7012a21026edfc1c9448a37 /src/libcharon/plugins/stroke/stroke_cred.h | |
| parent | ef2c61bc9279a3f7880df67d6af12b785c94694a (diff) | |
| download | strongswan-11c14bd2f5.tar.bz2 strongswan-11c14bd2f5.tar.xz | |
stroke: Serve ca section CA certificates directly, not over central CA set
This makes these CA certificates independent from the purge issued by reread
commands. Certificates loaded by CA sections can be removed through ipsec.conf
update/reread, while CA certificates loaded implicitly from ipsec.d/cacerts
can individually be reread using ipsec rereadcacerts.
Diffstat (limited to 'src/libcharon/plugins/stroke/stroke_cred.h')
| -rw-r--r-- | src/libcharon/plugins/stroke/stroke_cred.h | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/src/libcharon/plugins/stroke/stroke_cred.h b/src/libcharon/plugins/stroke/stroke_cred.h index f6fbb96d3..9434629ef 100644 --- a/src/libcharon/plugins/stroke/stroke_cred.h +++ b/src/libcharon/plugins/stroke/stroke_cred.h @@ -50,10 +50,13 @@ struct stroke_cred_t { void (*reread)(stroke_cred_t *this, stroke_msg_t *msg, FILE *prompt); /** - * Load a CA certificate, and serve it through the credential_set. + * Load a CA certificate. + * + * This method does not add the loaded CA certificate to the internal + * credentail set, but returns it only. * * @param filename file to load CA cert from - * @return reference to loaded certificate, or NULL + * @return loaded certificate, or NULL */ certificate_t* (*load_ca)(stroke_cred_t *this, char *filename); |