vici: Log certificate constraints for loaded configs

diff --git a/src/libcharon/plugins/vici/vici_config.c b/src/libcharon/plugins/vici/vici_config.c
index 1bbad13..eb67929 100644 (file)
--- a/src/libcharon/plugins/vici/vici_config.c
+++ b/src/libcharon/plugins/vici/vici_config.c
@@ -347,6 +347,7 @@ static void log_auth(auth_cfg_t *auth)
        union {
                uintptr_t u;
                identification_t *id;
+               certificate_t *cert;
                char *str;
        } v;
 
@@ -388,6 +389,12 @@ static void log_auth(auth_cfg_t *auth)
                        case AUTH_RULE_GROUP:
                                DBG2(DBG_CFG, "   group = %Y", v.id);
                                break;
+                       case AUTH_RULE_SUBJECT_CERT:
+                               DBG2(DBG_CFG, "   cert = %Y", v.cert->get_subject(v.cert));
+                               break;
+                       case AUTH_RULE_CA_CERT:
+                               DBG2(DBG_CFG, "   cacert = %Y", v.cert->get_subject(v.cert));
+                               break;
                        default:
                                break;
                }