vici: Add support for pubkey constraints with EAP-TLS

This is a feature currently supported by stroke.

diff --git a/src/libcharon/plugins/vici/vici_config.c b/src/libcharon/plugins/vici/vici_config.c
index 7711fa0cbdc0a46ae22f7c21839f820072613d1e..181b14b406970fd2597951885a7fc4b2baf0c561 100644 (file)
--- a/src/libcharon/plugins/vici/vici_config.c
+++ b/src/libcharon/plugins/vici/vici_config.c
@@ -982,8 +982,16 @@ CALLBACK(parse_auth, bool,
        }
        if (strcasepfx(buf, "eap"))
        {
+               char *pos;
+
                cfg->add(cfg, AUTH_RULE_AUTH_CLASS, AUTH_CLASS_EAP);
 
+               pos = strchr(buf, ':');
+               if (pos)
+               {
+                       *pos = 0;
+                       cfg->add_pubkey_constraints(cfg, pos + 1, FALSE);
+               }
                type = eap_vendor_type_from_string(buf);
                if (type)
                {