Added support for iKEIntermediate flag to ipsec pki.

diff --git a/src/pki/commands/issue.c b/src/pki/commands/issue.c
index 6a5686d92a6dc4eb06e9b6c2774f7314304e6636..97769fca6b26255c7b751afe3ce2503bee826548 100644 (file)
--- a/src/pki/commands/issue.c
+++ b/src/pki/commands/issue.c
@@ -229,6 +229,10 @@ static int issue()
                                {
                                        flags |= X509_CLIENT_AUTH;
                                }
+                               else if (streq(arg, "ikeIntermediate"))
+                               {
+                                       flags |= X509_IKE_INTERMEDIATE;
+                               }
                                else if (streq(arg, "crlSign"))
                                {
                                        flags |= X509_CRL_SIGN;

diff --git a/src/pki/commands/print.c b/src/pki/commands/print.c
index ee6f30c981d3bc08c9ca8fa9714d7c7275378386..2bc80f96b7cd05a203f8ef4d6e8d03edcf1eecf7 100644 (file)
--- a/src/pki/commands/print.c
+++ b/src/pki/commands/print.c
@@ -133,6 +133,10 @@ static void print_x509(x509_t *x509)
        {
                printf("clientAuth ");
        }
+       if (flags & X509_IKE_INTERMEDIATE)
+       {
+               printf("iKEIntermediate ");
+       }
        if (flags & X509_SELF_SIGNED)
        {
                printf("self-signed ");

diff --git a/src/pki/commands/self.c b/src/pki/commands/self.c
index c7788ff6248eeab47c79275a32681ff1cdcdde25..7852d8594b09d6cff6353549567c013f25720d06 100644 (file)
--- a/src/pki/commands/self.c
+++ b/src/pki/commands/self.c
@@ -212,6 +212,10 @@ static int self()
                                {
                                        flags |= X509_CLIENT_AUTH;
                                }
+                               else if (streq(arg, "ikeIntermediate"))
+                               {
+                                       flags |= X509_IKE_INTERMEDIATE;
+                               }
                                else if (streq(arg, "crlSign"))
                                {
                                        flags |= X509_CRL_SIGN;