diff options
| author | Thomas Egerer <thomas.egerer@secunet.com> | 2011-11-04 12:29:59 +0100 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2011-11-04 15:13:32 +0100 |
| commit | 72a1b2e3089ca3814a7741fb162620b7215e5807 (patch) | |
| tree | 516ece27aaff16051bd99da79370bfce8dce7f62 /src/scepclient | |
| parent | 866858527df68bb7183b4a03f877a52fdd534e38 (diff) | |
| download | strongswan-72a1b2e3089ca3814a7741fb162620b7215e5807.tar.bz2 strongswan-72a1b2e3089ca3814a7741fb162620b7215e5807.tar.xz | |
Allow support for CA-certificate retrieval in scepclient4.6.0
I think somehow this functionality got lost in the way from
strongswan-2.7.0...
Diffstat (limited to 'src/scepclient')
| -rw-r--r-- | src/scepclient/scepclient.c | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/src/scepclient/scepclient.c b/src/scepclient/scepclient.c index 6d5bf38ae..2d364d654 100644 --- a/src/scepclient/scepclient.c +++ b/src/scepclient/scepclient.c @@ -334,6 +334,7 @@ int main(int argc, char **argv) char *file_out_pkcs7 = DEFAULT_FILENAME_PKCS7; char *file_out_cert_self = DEFAULT_FILENAME_CERT_SELF; char *file_out_cert = DEFAULT_FILENAME_CERT; + char *file_out_ca_cert = DEFAULT_FILENAME_CACERT_ENC; /* by default user certificate is requested */ bool request_ca_certificate = FALSE; @@ -540,6 +541,8 @@ int main(int argc, char **argv) else if (strcaseeq("cacert", optarg)) { request_ca_certificate = TRUE; + if (filename) + file_out_ca_cert = filename; } else { @@ -783,6 +786,24 @@ int main(int argc, char **argv) usage("cannot generate --out of given --in!"); } + /* get CA cert */ + if (request_ca_certificate) + { + char *path = concatenate_paths(CA_CERT_PATH, file_out_ca_cert); + + if (!scep_http_request(scep_url, chunk_empty, SCEP_GET_CA_CERT, + http_get_request, &scep_response)) + { + exit_scepclient("did not receive a valid scep response"); + } + + if (!chunk_write(scep_response, path, "ca cert", 0022, force)) + { + exit_scepclient("could not write ca cert file '%s'", path); + } + exit_scepclient(NULL); /* no further output required */ + } + /* * input of PKCS#1 file */ |