From: Tobias Brunner <tobias@strongswan.org>
Date: Thu, 15 Dec 2011 15:56:07 +0000 (+0100)
Subject: Added support for iKEIntermediate flag to ipsec pki.
X-Git-Tag: 5.0.0~338^2~9^2~180
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=4bc4e8e17b5f6c00bc060376bfbd5dbd34e47d48;p=thirdparty%2Fstrongswan.git

Added support for iKEIntermediate flag to ipsec pki.
---

diff --git a/src/pki/commands/issue.c b/src/pki/commands/issue.c
index 6a5686d92a..97769fca6b 100644
--- a/src/pki/commands/issue.c
+++ b/src/pki/commands/issue.c
@@ -229,6 +229,10 @@ static int issue()
 				{
 					flags |= X509_CLIENT_AUTH;
 				}
+				else if (streq(arg, "ikeIntermediate"))
+				{
+					flags |= X509_IKE_INTERMEDIATE;
+				}
 				else if (streq(arg, "crlSign"))
 				{
 					flags |= X509_CRL_SIGN;
diff --git a/src/pki/commands/print.c b/src/pki/commands/print.c
index ee6f30c981..2bc80f96b7 100644
--- a/src/pki/commands/print.c
+++ b/src/pki/commands/print.c
@@ -133,6 +133,10 @@ static void print_x509(x509_t *x509)
 	{
 		printf("clientAuth ");
 	}
+	if (flags & X509_IKE_INTERMEDIATE)
+	{
+		printf("iKEIntermediate ");
+	}
 	if (flags & X509_SELF_SIGNED)
 	{
 		printf("self-signed ");
diff --git a/src/pki/commands/self.c b/src/pki/commands/self.c
index c7788ff624..7852d8594b 100644
--- a/src/pki/commands/self.c
+++ b/src/pki/commands/self.c
@@ -212,6 +212,10 @@ static int self()
 				{
 					flags |= X509_CLIENT_AUTH;
 				}
+				else if (streq(arg, "ikeIntermediate"))
+				{
+					flags |= X509_IKE_INTERMEDIATE;
+				}
 				else if (streq(arg, "crlSign"))
 				{
 					flags |= X509_CRL_SIGN;