CVSROOT: /cvs Module name: src Changes by: to...@cvs.openbsd.org 2020/08/21 08:30:17
Modified files:
sbin/iked : ca.c iked.c iked.conf.5 iked.h ocsp.c types.h
Log message:
Use trusted CA from /etc/iked/ca/ as OCSP issuer to get rid of
/etc/iked/ocsp/issuer.crt.
Try to get the OCSP url from the CA/issuer certificate, otherwise
use the URL configured in 'set ocsp' in iked.conf.
ok patrick@
