From: Martin Willi <martin@revosec.ch>
Date: Tue, 29 Apr 2014 10:11:09 +0000 (+0200)
Subject: vici: Have an explicit "relaxed" keyword for the default revocation policy
X-Git-Tag: 5.2.0dr3~9^2~15
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f3e1ec4a85dfb94d9774dc60f6a19d659712f8f6;p=thirdparty%2Fstrongswan.git

vici: Have an explicit "relaxed" keyword for the default revocation policy
---

diff --git a/src/libcharon/plugins/vici/vici_config.c b/src/libcharon/plugins/vici/vici_config.c
index bf6f88f1b4..08cf92666d 100644
--- a/src/libcharon/plugins/vici/vici_config.c
+++ b/src/libcharon/plugins/vici/vici_config.c
@@ -1025,12 +1025,16 @@ CALLBACK(parse_revocation, bool,
 	enum_map_t map[] = {
 		{ "strict",		VALIDATION_GOOD		},
 		{ "ifuri",		VALIDATION_SKIPPED	},
+		{ "relaxed",	VALIDATION_FAILED	},
 	};
 	int d;
 
 	if (parse_map(map, countof(map), &d, v))
 	{
-		cfg->add(cfg, AUTH_RULE_CRL_VALIDATION, d);
+		if (d != VALIDATION_FAILED)
+		{
+			cfg->add(cfg, AUTH_RULE_CRL_VALIDATION, d);
+		}
 		return TRUE;
 	}
 	return FALSE;