From: Tobias Brunner <tobias@strongswan.org>
Date: Fri, 29 Nov 2019 11:16:43 +0000 (+0100)
Subject: vici: Log certificate constraints for loaded configs
X-Git-Tag: 5.8.2rc1~6^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ae9b748a77c3e5267f80bb320acdcd76940403bb;p=thirdparty%2Fstrongswan.git

vici: Log certificate constraints for loaded configs
---

diff --git a/src/libcharon/plugins/vici/vici_config.c b/src/libcharon/plugins/vici/vici_config.c
index 1bbad139ee..eb679290de 100644
--- a/src/libcharon/plugins/vici/vici_config.c
+++ b/src/libcharon/plugins/vici/vici_config.c
@@ -347,6 +347,7 @@ static void log_auth(auth_cfg_t *auth)
 	union {
 		uintptr_t u;
 		identification_t *id;
+		certificate_t *cert;
 		char *str;
 	} v;
 
@@ -388,6 +389,12 @@ static void log_auth(auth_cfg_t *auth)
 			case AUTH_RULE_GROUP:
 				DBG2(DBG_CFG, "   group = %Y", v.id);
 				break;
+			case AUTH_RULE_SUBJECT_CERT:
+				DBG2(DBG_CFG, "   cert = %Y", v.cert->get_subject(v.cert));
+				break;
+			case AUTH_RULE_CA_CERT:
+				DBG2(DBG_CFG, "   cacert = %Y", v.cert->get_subject(v.cert));
+				break;
 			default:
 				break;
 		}