Re: [strongSwan] Removing individual certs

2019-06-09 Thread Roee Agami
Any news with that?

> On May 24, 2019, at 4:27 PM, Roee Agami  wrote:
> 
> Any news with that?
> 
>> On May 22, 2019, at 10:09 AM, Roee Agami  wrote:
>> 
>> What do you think Andreas? Do those reasons make sense to you?
>> 
>> Roee.
>> 
>>> On May 20, 2019, at 11:08 AM, Roee Agami  wrote:
>>> 
>>> Hi,
>>> We have a configuration layer on top of VICI, which we use to load certs 
>>> among other things.
>>> A user has the ability to add/modify/delete certs and in case he made a 
>>> mistake and loaded the wrong cert, I want him to be able to clean it up.
>>> The mistakenly added cert could still be valid, just not the one the user 
>>> wanted to get loaded on that machine.
>>> 
>>> Roee.
>>> 
 On May 19, 2019, at 10:36 AM, Andreas Steffen 
  wrote:
 
 Hi Roee,
 
 why would you want to unload end entity certificates at all?
 
 Regards
 
 Andreas
 
 On 17.05.19 18:48, Roee Agami wrote:
> Hi,
> Is there a way to unload individual certs from strongswan?
> All I see is ways to completely remove all of the configured certs.
> 
> Thanks.
 ==
 Andreas Steffen andreas.stef...@strongswan.org
 strongSwan - the Open Source VPN Solution!  www.strongswan.org
 Institute for Networked Solutions
 HSR University of Applied Sciences Rapperswil
 CH-8640 Rapperswil (Switzerland)
 ===[INS-HSR]==
 
>>> 
>> 
> 



Re: [strongSwan] Removing individual certs

2019-05-24 Thread Roee Agami
Any news with that?

> On May 22, 2019, at 10:09 AM, Roee Agami  wrote:
> 
> What do you think Andreas? Do those reasons make sense to you?
> 
> Roee.
> 
>> On May 20, 2019, at 11:08 AM, Roee Agami  wrote:
>> 
>> Hi,
>> We have a configuration layer on top of VICI, which we use to load certs 
>> among other things.
>> A user has the ability to add/modify/delete certs and in case he made a 
>> mistake and loaded the wrong cert, I want him to be able to clean it up.
>> The mistakenly added cert could still be valid, just not the one the user 
>> wanted to get loaded on that machine.
>> 
>> Roee.
>> 
>>> On May 19, 2019, at 10:36 AM, Andreas Steffen 
>>>  wrote:
>>> 
>>> Hi Roee,
>>> 
>>> why would you want to unload end entity certificates at all?
>>> 
>>> Regards
>>> 
>>> Andreas
>>> 
>>> On 17.05.19 18:48, Roee Agami wrote:
 Hi,
 Is there a way to unload individual certs from strongswan?
 All I see is ways to completely remove all of the configured certs.
 
 Thanks.
>>> ==
>>> Andreas Steffen andreas.stef...@strongswan.org
>>> strongSwan - the Open Source VPN Solution!  www.strongswan.org
>>> Institute for Networked Solutions
>>> HSR University of Applied Sciences Rapperswil
>>> CH-8640 Rapperswil (Switzerland)
>>> ===[INS-HSR]==
>>> 
>> 
> 



Re: [strongSwan] Removing individual certs

2019-05-22 Thread Roee Agami
What do you think Andreas? Do those reasons make sense to you?

Roee.

> On May 20, 2019, at 11:08 AM, Roee Agami  wrote:
> 
> Hi,
> We have a configuration layer on top of VICI, which we use to load certs 
> among other things.
> A user has the ability to add/modify/delete certs and in case he made a 
> mistake and loaded the wrong cert, I want him to be able to clean it up.
> The mistakenly added cert could still be valid, just not the one the user 
> wanted to get loaded on that machine.
> 
> Roee.
> 
>> On May 19, 2019, at 10:36 AM, Andreas Steffen 
>>  wrote:
>> 
>> Hi Roee,
>> 
>> why would you want to unload end entity certificates at all?
>> 
>> Regards
>> 
>> Andreas
>> 
>> On 17.05.19 18:48, Roee Agami wrote:
>>> Hi,
>>> Is there a way to unload individual certs from strongswan?
>>> All I see is ways to completely remove all of the configured certs.
>>> 
>>> Thanks.
>> ==
>> Andreas Steffen andreas.stef...@strongswan.org
>> strongSwan - the Open Source VPN Solution!  www.strongswan.org
>> Institute for Networked Solutions
>> HSR University of Applied Sciences Rapperswil
>> CH-8640 Rapperswil (Switzerland)
>> ===[INS-HSR]==
>> 
> 



[strongSwan] Removing individual certs

2019-05-17 Thread Roee Agami
Hi,
Is there a way to unload individual certs from strongswan?
All I see is ways to completely remove all of the configured certs.

Thanks.