CVSROOT: /cvs Module name: src Changes by: [email protected] 2023/06/28 08:10:24
Modified files:
sbin/iked : ca.c iked.h ikev2.c ikev2.h ikev2_msg.c
ikev2_pld.c
Log message:
Add support to verify X509 chain from CERT payloads.
Encode cert and intermediate CAs in new cert bundle object,
so the information can be passed to the ca process in one step.
Pass untrusted intermediates to X509_verify_cert().
>From markus@
