From 11a7abf5546e139552dcb90c5940860c9b2242e9 Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Tue, 8 Jan 2013 14:58:18 +0100 Subject: [PATCH] Add ipsec.conf.5 updates regarding multiple certificates in leftcert --- man/ipsec.conf.5.in | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in index 2766cc4ed..7144a1353 100644 --- a/man/ipsec.conf.5.in +++ b/man/ipsec.conf.5.in @@ -613,6 +613,10 @@ connection. See ipsec.secrets(5) for details about smartcard definitions. is required only if selecting the certificate with .B leftid is not sufficient, for example if multiple certificates use the same subject. +.br +Multiple certificate paths or PKCS#11 backends can be specified in a comma +separated list. The daemon chooses the certificate based on the received +certificate requests if possible before enforcing the first. .TP .BR leftcert2 " = " Same as