Added a flag for X509 CRLSign keyUsage

diff --git a/src/libstrongswan/credentials/certificates/x509.h b/src/libstrongswan/credentials/certificates/x509.h
index 394b613d8d52cb84482de8ec935624851ffe92b8..cadb4019949b95f2f1775ae1d340e27ae05b821d 100644 (file)
--- a/src/libstrongswan/credentials/certificates/x509.h
+++ b/src/libstrongswan/credentials/certificates/x509.h
@@ -49,6 +49,8 @@ enum x509_flag_t {
        X509_SELF_SIGNED =              (1<<5),
        /** cert has an ipAddrBlocks extension */
        X509_IP_ADDR_BLOCKS =   (1<<6),
+       /** cert has CRL sign key usage */
+       X509_CRL_SIGN =                 (1<<7),
 };
 
 /**