I am looking at some old application code that executes the command "ipsec 
purgecrls" and then sends the VICI command clear-creds.

Man ipsec purgecrls reveals
                Purgecrls - purges all cached CRLS

VICI protocola web page describes clear-creds as
Clear all loaded certificates, private key and shared key credentials.
This affects only credentials loaded over vici, but additionally flushes the 
credential store.

If a CRL is a credential, does clear-creds duplicate the "ipsec purgcrls" 
command, making the separate command redundant?
Does the code need to send both commands?


Philip Taylor



Public

Reply via email to