aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/credentials/credential_manager.h
diff options
context:
space:
mode:
authorTobias Brunner <tobias@strongswan.org>2015-10-26 15:35:23 +0100
committerTobias Brunner <tobias@strongswan.org>2016-03-10 11:07:14 +0100
commit5452e3d66e6bc20f1052f3d616a0f29eab17256c (patch)
tree44d75edf2a9b4123d81f1802049b2174493d3f37 /src/libstrongswan/credentials/credential_manager.h
parent819da83fccf99acf7af1ed2bf61a498425c375e1 (diff)
downloadstrongswan-5452e3d66e6bc20f1052f3d616a0f29eab17256c.tar.bz2
strongswan-5452e3d66e6bc20f1052f3d616a0f29eab17256c.tar.xz
credential-manager: Make online revocation checks optional for public key enumerator
Diffstat (limited to 'src/libstrongswan/credentials/credential_manager.h')
-rw-r--r--src/libstrongswan/credentials/credential_manager.h7
1 files changed, 6 insertions, 1 deletions
diff --git a/src/libstrongswan/credentials/credential_manager.h b/src/libstrongswan/credentials/credential_manager.h
index 445ea3f9c..022ca566c 100644
--- a/src/libstrongswan/credentials/credential_manager.h
+++ b/src/libstrongswan/credentials/credential_manager.h
@@ -1,4 +1,5 @@
/*
+ * Copyright (C) 2015 Tobias Brunner
* Copyright (C) 2007-2009 Martin Willi
* Hochschule fuer Technik Rapperswil
*
@@ -202,14 +203,18 @@ struct credential_manager_t {
* where the auth config helper contains rules for constraint checks.
* This function is very similar to create_trusted_enumerator(), but
* gets public keys directly.
+ * If online is set, revocations are checked online for the whole
+ * trustchain.
*
* @param type type of the key to get
* @param id owner of the key, signer of the signature
* @param auth authentication infos
+ * @param online whether revocations should be checked online
* @return enumerator
*/
enumerator_t* (*create_public_enumerator)(credential_manager_t *this,
- key_type_t type, identification_t *id, auth_cfg_t *auth);
+ key_type_t type, identification_t *id, auth_cfg_t *auth,
+ bool online);
/**
* Cache a certificate by invoking cache_cert() on all registered sets.