diff options
| author | Martin Willi <martin@revosec.ch> | 2010-12-03 13:25:45 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2011-01-05 16:45:56 +0100 |
| commit | bb0cda2fa9b52d0caac9f98686e12ad9f1ca5905 (patch) | |
| tree | e679f775b2e4bd4d2e70f7275c58360564511d49 /src/pki/commands/self.c | |
| parent | 6807c0ca2cd88356856439e9529eac1cb3f1624b (diff) | |
| download | strongswan-bb0cda2fa9b52d0caac9f98686e12ad9f1ca5905.tar.bz2 strongswan-bb0cda2fa9b52d0caac9f98686e12ad9f1ca5905.tar.xz | |
pki tool shows and builds crlSign keyUsage
Diffstat (limited to 'src/pki/commands/self.c')
| -rw-r--r-- | src/pki/commands/self.c | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/src/pki/commands/self.c b/src/pki/commands/self.c index 5e6f0bd14..d15b1e26e 100644 --- a/src/pki/commands/self.c +++ b/src/pki/commands/self.c @@ -113,6 +113,10 @@ static int self() { flags |= X509_CLIENT_AUTH; } + else if (streq(arg, "crlSign")) + { + flags |= X509_CRL_SIGN; + } else if (streq(arg, "ocspSigning")) { flags |= X509_OCSP_SIGNER; @@ -257,7 +261,7 @@ static void __attribute__ ((constructor))reg() {"[--in file | --keyid hex] [--type rsa|ecdsa]", " --dn distinguished-name [--san subjectAltName]+", "[--lifetime days] [--serial hex] [--ca] [--ocsp uri]+", - "[--flag serverAuth|clientAuth|ocspSigning]+", + "[--flag serverAuth|clientAuth|crlSign|ocspSigning]+", "[--digest md5|sha1|sha224|sha256|sha384|sha512] [--outform der|pem]"}, { {"help", 'h', 0, "show usage information"}, |