vici: Properly add CRLs to the credential set

add_crl() ensures that old CLRs are not stored in the credential set.

diff --git a/src/libcharon/plugins/vici/vici_cred.c b/src/libcharon/plugins/vici/vici_cred.c
index ffdc034ea0d7e6a56d8248f8181af1cfd3f870fd..ce3ed78c18d0242bf8cf16edad284cc5c9416d00 100644 (file)
--- a/src/libcharon/plugins/vici/vici_cred.c
+++ b/src/libcharon/plugins/vici/vici_cred.c
@@ -131,8 +131,14 @@ CALLBACK(load_cert, vici_message_t*,
 
        DBG1(DBG_CFG, "loaded certificate '%Y'", cert->get_subject(cert));
 
-       this->creds->add_cert(this->creds, TRUE, cert);
-
+       if (type == CERT_X509_CRL)
+       {
+               this->creds->add_crl(this->creds, (crl_t*)cert);
+       }
+       else
+       {
+               this->creds->add_cert(this->creds, TRUE, cert);
+       }
        return create_reply(NULL);
 }