Merge pull request #421 from fedepell/tls_reset

tls: add method to reset used CRL (certificate revocation list)

hal/inc/tls_config.h

@@ -296,6 +296,13 @@ TLSConfiguration_addCRL(TLSConfiguration self, uint8_t* crl, int crlLen);
 PAL_API bool
 TLSConfiguration_addCRLFromFile(TLSConfiguration self, const char* filename);
 
+/**
+ * \brief Removes any CRL (certificate revocation list) currently in use
+ *
+ */
+PAL_API void
+TLSConfiguration_resetCRL(TLSConfiguration self);
+
 /**
  * Release all resource allocated by the TLSConfiguration instance
  *

hal/tls/mbedtls/tls_mbedtls.c

@@ -475,6 +475,14 @@ TLSConfiguration_addCRLFromFile(TLSConfiguration self, const char* filename)
     return (ret == 0);
 }
 
+void
+TLSConfiguration_resetCRL(TLSConfiguration self)
+{
+    mbedtls_x509_crl_free(&(self->crl));
+    mbedtls_x509_crl_init(&(self->crl));
+    self->crlUpdated = Hal_getTimeInMs();
+}
+
 void
 TLSConfiguration_setRenegotiationTime(TLSConfiguration self, int timeInMs)
 {