diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2016-11-16 15:37:23 +0100 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2017-02-16 19:23:50 +0100 |
| commit | e00bc9f6b298bf2ae8151bee83c346d6f867c0cb (patch) | |
| tree | d3861a6604246cd9bc1ee80dbd2d3c7241e3b479 /src/libcharon/plugins | |
| parent | 44fcc83310ed7a032d2cf0fa315f3f7bd36c0f69 (diff) | |
| download | strongswan-e00bc9f6b298bf2ae8151bee83c346d6f867c0cb.tar.bz2 strongswan-e00bc9f6b298bf2ae8151bee83c346d6f867c0cb.tar.xz | |
vici: Add support for certificate policies
Diffstat (limited to 'src/libcharon/plugins')
| -rw-r--r-- | src/libcharon/plugins/vici/vici_config.c | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/src/libcharon/plugins/vici/vici_config.c b/src/libcharon/plugins/vici/vici_config.c index ff706be46..add81b9ef 100644 --- a/src/libcharon/plugins/vici/vici_config.c +++ b/src/libcharon/plugins/vici/vici_config.c @@ -1142,6 +1142,22 @@ CALLBACK(parse_group, bool, } /** + * Parse certificate policy + */ +CALLBACK(parse_cert_policy, bool, + auth_cfg_t *cfg, chunk_t v) +{ + char buf[BUF_LEN]; + + if (!vici_stringify(v, buf, sizeof(buf))) + { + return FALSE; + } + cfg->add(cfg, AUTH_RULE_CERT_POLICY, strdup(buf)); + return TRUE; +} + +/** * Parse a certificate; add as auth rule to config */ static bool parse_cert(auth_data_t *auth, auth_rule_t rule, chunk_t v) @@ -1402,6 +1418,7 @@ CALLBACK(auth_li, bool, { parse_rule_t rules[] = { { "groups", parse_group, auth->cfg }, + { "cert_policy", parse_cert_policy, auth }, { "certs", parse_certs, auth }, { "cacerts", parse_cacerts, auth }, { "pubkeys", parse_pubkeys, auth }, |