diff options
| author | tobhe <tobhe@cvs.openbsd.org> | 2020-08-21 14:30:18 +0000 |
|---|---|---|
| committer | tobhe <tobhe@cvs.openbsd.org> | 2020-08-21 14:30:18 +0000 |
| commit | 0c95df5bdc518d23e4d9d0e5c33b025001fbfb53 (patch) | |
| tree | 3b961ad453b0597b8f3cece0f45ab1d101d993f9 /sbin/iked/types.h | |
| parent | ea1be61fabece4ab78af1c506bb63cf58272e636 (diff) | |
Use trusted CA from /etc/iked/ca/ as OCSP issuer to get rid of
/etc/iked/ocsp/issuer.crt.
Try to get the OCSP url from the CA/issuer certificate, otherwise
use the URL configured in 'set ocsp' in iked.conf.
ok patrick@
Diffstat (limited to 'sbin/iked/types.h')
| -rw-r--r-- | sbin/iked/types.h | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/sbin/iked/types.h b/sbin/iked/types.h index 0256ada0d6a..5687dafaaed 100644 --- a/sbin/iked/types.h +++ b/sbin/iked/types.h @@ -1,4 +1,4 @@ -/* $OpenBSD: types.h,v 1.36 2020/08/18 21:02:49 tobhe Exp $ */ +/* $OpenBSD: types.h,v 1.37 2020/08/21 14:30:17 tobhe Exp $ */ /* * Copyright (c) 2019 Tobias Heider <tobias.heider@stusta.de> @@ -42,7 +42,6 @@ #define IKED_PUBKEY "local.pub" #define IKED_OCSP_RESPCERT "ocsp/responder.crt" -#define IKED_OCSP_ISSUER "ocsp/issuer.crt" #define IKED_OPT_VERBOSE 0x00000001 #define IKED_OPT_NOACTION 0x00000002 |