strongswan/src
Andreas Steffen 2c7cfe7630 vici: flush-certs command flushes certificate cache
When fresh CRLs are released with a high update frequency (e.g.
every 24 hours) or OCSP is used then the certificate cache gets
quickly filled with stale CRLs or OCSP responses. The new VICI
flush-certs command allows to flush e.g. cached CRLs or OCSP
responses only. Without the type argument all kind of certificates
(e.g. also received end entity and intermediate CA certificates)
are purged.
2016-09-13 17:02:59 +02:00
..
_copyright lib: Add global config namespace 2014-02-12 14:34:31 +01:00
_updown updown: Add rules to allow IP6IP6 traffic used for uncompressed small packets 2015-09-21 10:12:17 +02:00
aikgen aikgen: Fix computation of key ID of the AIK public key 2016-06-30 12:56:41 +02:00
aikpub2 Created libtpmtss library handling access to v1.2 and v2.0 TPMs 2016-06-22 15:33:43 +02:00
charon configure: Check for and explicitly link against -latomic 2016-06-14 14:27:20 +02:00
charon-cmd configure: Check for and explicitly link against -latomic 2016-06-14 14:27:20 +02:00
charon-nm nm: Pass external gateway to NM 2016-09-05 15:41:16 +02:00
charon-svc charon-svc: Inherit all settings from the charon section 2016-03-08 10:56:19 +01:00
charon-systemd configure: Check for and explicitly link against -latomic 2016-06-14 14:27:20 +02:00
charon-tkm kernel: Use structs to pass information to the kernel-ipsec interface 2016-04-09 16:50:59 +02:00
checksum integrity-test: check code and ro segments of libnttfft 2016-07-29 12:36:15 +02:00
conftest configure: Check for and explicitly link against -latomic 2016-06-14 14:27:20 +02:00
dumm Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
frontends nm: Updated NEWS 2016-09-05 16:24:50 +02:00
include Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ipsec ipsec: Fix stop command on systems where sleep(1) only supports integers 2015-12-10 11:46:21 +01:00
libcharon vici: flush-certs command flushes certificate cache 2016-09-13 17:02:59 +02:00
libfast configure: Check for and explicitly link against -latomic 2016-06-14 14:27:20 +02:00
libimcv libimcv: No need to load AIK pubkey if AIK certificate is available 2016-08-31 16:12:55 +02:00
libipsec Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
libpttls libtpmtss: Added to integrity checks 2016-06-26 18:19:05 +02:00
libradius Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
libsimaka Fixed some typos, courtesy of codespell 2016-07-04 12:18:51 +02:00
libstrongswan auth-cfg-wrapper: Fix memory leak with hash-and-URL certificates 2016-09-12 16:20:34 +02:00
libtls Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
libtnccs Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
libtncif Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
libtpmtss libtpmtss: TCTI finalization call changed 2016-08-25 13:22:51 +02:00
manager Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
medsrv medsrv: Replace remaining JavaScript code with CSS 2015-11-09 16:36:48 +01:00
pki pki: Allow to load CRLs from files in --verify 2016-08-25 11:07:35 +02:00
pool pool: Use correct name to remove index for CHILD_SA TS in SQLite script 2016-04-18 10:08:44 +02:00
pt-tls-client pt-tls-client: Added support of ECDSA keys 2016-08-31 17:06:47 +02:00
scepclient libhydra: Remove empty unused library 2016-03-03 17:36:11 +01:00
starter Report test coverage of libcharon and starter 2016-06-17 18:48:08 +02:00
stroke Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
swanctl vici: flush-certs command flushes certificate cache 2016-09-13 17:02:59 +02:00
Makefile.am Created libtpmtss library handling access to v1.2 and v2.0 TPMs 2016-06-22 15:33:43 +02:00