vici: Log certificate constraints for loaded configs

diff --git a/src/libcharon/plugins/vici/vici_config.c b/src/libcharon/plugins/vici/vici_config.c
index 1bbad139eeb97b300c51a1538a197be08fd0d2ea..eb679290de51703741b05ba41ea357ba7043ad56 100644 (file)
--- a/src/libcharon/plugins/vici/vici_config.c
+++ b/src/libcharon/plugins/vici/vici_config.c
@@ -347,6 +347,7 @@ static void log_auth(auth_cfg_t *auth)
        union {
                uintptr_t u;
                identification_t *id;
+               certificate_t *cert;
                char *str;
        } v;
 
@@ -388,6 +389,12 @@ static void log_auth(auth_cfg_t *auth)
                        case AUTH_RULE_GROUP:
                                DBG2(DBG_CFG, "   group = %Y", v.id);
                                break;
+                       case AUTH_RULE_SUBJECT_CERT:
+                               DBG2(DBG_CFG, "   cert = %Y", v.cert->get_subject(v.cert));
+                               break;
+                       case AUTH_RULE_CA_CERT:
+                               DBG2(DBG_CFG, "   cacert = %Y", v.cert->get_subject(v.cert));
+                               break;
                        default:
                                break;
                }