]> git.ipfire.org Git - thirdparty/strongswan.git/commit
charon-tkm: Reverse cert chain processing order
authorAdrian-Ken Rueegsegger <ken@codelabs.ch>
Thu, 22 Oct 2020 17:11:32 +0000 (19:11 +0200)
committerTobias Brunner <tobias@strongswan.org>
Fri, 8 Jan 2021 16:22:36 +0000 (17:22 +0100)
commita0a0571bd1a6eff9d42c668b26372bb45fb63dc0
treeb05dff2abb8f67d2370992d35300ac2e7bed7ef1
parent532023dcf10e0d1fd785aa94873fa1d9278f1988
charon-tkm: Reverse cert chain processing order

Verify certificate chains starting from the root CA certificate and
moving towards the leaf/user certificate.

Also update TKM-RPC and TKM in testing scripts to version supporting the
reworked CC handling.
src/charon-tkm/src/tkm/tkm_listener.c
testing/scripts/recipes/006_tkm-rpc.mk
testing/scripts/recipes/010_tkm.mk
testing/tests/tkm/host2host-initiator/evaltest.dat
testing/tests/tkm/host2host-responder/evaltest.dat
testing/tests/tkm/host2host-xfrmproxy/evaltest.dat
testing/tests/tkm/multiple-clients/evaltest.dat
testing/tests/tkm/net2net-initiator/evaltest.dat
testing/tests/tkm/net2net-xfrmproxy/evaltest.dat
testing/tests/tkm/xfrmproxy-expire/evaltest.dat
testing/tests/tkm/xfrmproxy-rekey/evaltest.dat