vici: Have an explicit "relaxed" keyword for the default revocation policy

diff --git a/src/libcharon/plugins/vici/vici_config.c b/src/libcharon/plugins/vici/vici_config.c
index bf6f88f1b4b91c26f55c39b30d67470b94d9979c..08cf92666d0687199879dd0c0f3ed245d3df60fb 100644 (file)
--- a/src/libcharon/plugins/vici/vici_config.c
+++ b/src/libcharon/plugins/vici/vici_config.c
@@ -1025,12 +1025,16 @@ CALLBACK(parse_revocation, bool,
        enum_map_t map[] = {
                { "strict",             VALIDATION_GOOD         },
                { "ifuri",              VALIDATION_SKIPPED      },
+               { "relaxed",    VALIDATION_FAILED       },
        };
        int d;
 
        if (parse_map(map, countof(map), &d, v))
        {
-               cfg->add(cfg, AUTH_RULE_CRL_VALIDATION, d);
+               if (d != VALIDATION_FAILED)
+               {
+                       cfg->add(cfg, AUTH_RULE_CRL_VALIDATION, d);
+               }
                return TRUE;
        }
        return FALSE;