Added support for iKEIntermediate flag to ipsec pki.
authorTobias Brunner <tobias@strongswan.org>
Thu, 15 Dec 2011 15:56:07 +0000 (16:56 +0100)
committerTobias Brunner <tobias@strongswan.org>
Tue, 20 Mar 2012 16:31:25 +0000 (17:31 +0100)
src/pki/commands/issue.c
src/pki/commands/print.c
src/pki/commands/self.c

index 6a5686d..97769fc 100644 (file)
@@ -229,6 +229,10 @@ static int issue()
                                {
                                        flags |= X509_CLIENT_AUTH;
                                }
+                               else if (streq(arg, "ikeIntermediate"))
+                               {
+                                       flags |= X509_IKE_INTERMEDIATE;
+                               }
                                else if (streq(arg, "crlSign"))
                                {
                                        flags |= X509_CRL_SIGN;
index ee6f30c..2bc80f9 100644 (file)
@@ -133,6 +133,10 @@ static void print_x509(x509_t *x509)
        {
                printf("clientAuth ");
        }
+       if (flags & X509_IKE_INTERMEDIATE)
+       {
+               printf("iKEIntermediate ");
+       }
        if (flags & X509_SELF_SIGNED)
        {
                printf("self-signed ");
index c7788ff..7852d85 100644 (file)
@@ -212,6 +212,10 @@ static int self()
                                {
                                        flags |= X509_CLIENT_AUTH;
                                }
+                               else if (streq(arg, "ikeIntermediate"))
+                               {
+                                       flags |= X509_IKE_INTERMEDIATE;
+                               }
                                else if (streq(arg, "crlSign"))
                                {
                                        flags |= X509_CRL_SIGN;