From: Tobias Brunner <tobias@strongswan.org>
Date: Wed, 20 Jun 2018 15:25:18 +0000 (+0200)
Subject: android: Import CRL/OCSP/strict flags
X-Git-Tag: 5.7.0dr5~20^2~19
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e1e6096b313d5f165a26c0069741e27fd89c41d1;p=thirdparty%2Fstrongswan.git

android: Import CRL/OCSP/strict flags
---

diff --git a/src/frontends/android/app/src/main/java/org/strongswan/android/ui/VpnProfileImportActivity.java b/src/frontends/android/app/src/main/java/org/strongswan/android/ui/VpnProfileImportActivity.java
index e923473cc4..596926bc3d 100644
--- a/src/frontends/android/app/src/main/java/org/strongswan/android/ui/VpnProfileImportActivity.java
+++ b/src/frontends/android/app/src/main/java/org/strongswan/android/ui/VpnProfileImportActivity.java
@@ -475,6 +475,23 @@ public class VpnProfileImportActivity extends AppCompatActivity
 			flags |= VpnProfile.FLAGS_SUPPRESS_CERT_REQS;
 		}
 
+		JSONObject revocation = remote.optJSONObject("revocation");
+		if (revocation != null)
+		{
+			if (!revocation.optBoolean("crl", true))
+			{
+				flags |= VpnProfile.FLAGS_DISABLE_CRL;
+			}
+			if (!revocation.optBoolean("ocsp", true))
+			{
+				flags |= VpnProfile.FLAGS_DISABLE_OCSP;
+			}
+			if (revocation.optBoolean("strict", false))
+			{
+				flags |= VpnProfile.FLAGS_STRICT_REVOCATION;
+			}
+		}
+
 		JSONObject local = obj.optJSONObject("local");
 		if (local != null)
 		{