sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-03 00:00:24 -04:00
Code Issues Projects Releases Wiki Activity

peer-cfg: Renumber ocsp_policy_t values so the same default applies for all backends

Browse Source 
Only the vici plugin previously set OCSP_SEND_REPLY explicitly, all other
backends would have defaulted to OCSP_SEND_BOTH.

References strongswan/strongswan#2016
This commit is contained in:
Tobias Brunner 2024-03-15 14:37:53 +01:00
parent a2ace8a6bb
commit cfc7be004d
2 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/libcharon/config/peer_cfg.c
View File

@ -32,10 +32,10 @@ ENUM(cert_policy_names, CERT_ALWAYS_SEND, CERT_NEVER_SEND,
"CERT_NEVER_SEND",
);
ENUM(ocsp_policy_names, OCSP_SEND_BOTH, OCSP_SEND_NEVER,
"OCSP_SEND_BOTH",
ENUM(ocsp_policy_names, OCSP_SEND_REPLY, OCSP_SEND_NEVER,
"OCSP_SEND_REPLY",
"OCSP_SEND_REQUEST",
"OCSP_SEND_BOTH",
"OCSP_SEND_NEVER",
);

8
src/libcharon/config/peer_cfg.h
View File

@ -66,12 +66,12 @@ extern enum_name_t *cert_policy_names;
* OCSP status request/response sending policy.
*/
enum ocsp_policy_t {
/** request OCSP status and reply to OCSP status requests */
OCSP_SEND_BOTH = 0,
/** send OCSP status upon OCSP status request */
OCSP_SEND_REPLY = 1,
OCSP_SEND_REPLY = 0,
/** send OCSP status request */
OCSP_SEND_REQUEST = 2,
OCSP_SEND_REQUEST = 1,
/** request OCSP status and reply to OCSP status requests */
OCSP_SEND_BOTH = 2,
/** never send OCSP status request or response */
OCSP_SEND_NEVER = 3,
};