Support sending certificate chains with intermediate CAs in multiple CERT
authortobhe <tobhe@openbsd.org>
Fri, 8 Jul 2022 19:51:11 +0000 (19:51 +0000)
committertobhe <tobhe@openbsd.org>
Fri, 8 Jul 2022 19:51:11 +0000 (19:51 +0000)
commit055943a192f18e1315df27bcd3114dacc5842dc7
treeb5de1428c3d58ef19a5246dc90d6469a45b470d1
parentecfba8db1149ba8950016d30370569e5f0075090
Support sending certificate chains with intermediate CAs in multiple CERT
payloads.  Local certificate chains as required with LetsEncrypt certs will
work between iked and other IKEv2 implementations,  iked to iked connections
won't work yet because of missing support to receive multiple CERT
payloads.

from Katsuhiro Ueno
tested by and ok sthen@
sbin/iked/ca.c
sbin/iked/config.c
sbin/iked/eap.c
sbin/iked/iked.h
sbin/iked/ikev2.c
sbin/iked/types.h