Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature request: API to unload single certificate from strongswan #8

Open
amdrsantos opened this issue Jan 11, 2022 · 1 comment
Open

Comments

@amdrsantos
Copy link

Currently, there is no davici API to remove just a single certificate from strongSwan.
The only way is to clear all credentials (clear-creds command) which unloads all certificates and private keys from strongswan, and then load the ones you actually want.
Refer to How to unload a particular certificate from strongswan.

This is a limitation, because when a certificate is unloaded, all traffic must be re-started, even is the certificate is not being used at all.

Is it possible to improve davici library to get rid of this limitation ?

Thanks in advance,
Alex

@amdrsantos
Copy link
Author

Any update on this topic?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant