denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add support for IKEv2 OCSP extensions (RFC 4806)

Browse Source 
Closes strongswan/strongswan#2016

Co-authored-by: Tobias Brunner <[email protected]>
This commit is contained in:
Jean-François Hren
2024-03-13 15:10:50 +01:00
committed by Tobias Brunner
co-authored by Tobias Brunner
parent ddd926b698
commit 15612b3a42
15 changed files with 477 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/swanctl/swanctl.opt
+13
View File
@@ -205,6 +205,19 @@ connections.<conn>.send_cert = ifasked
certificate payloads altogether, _always_ causes certificate payloads to be
sent unconditionally whenever certificate authentication is used.
connections.<conn>.ocsp = reply
Request and send OCSP status in certificate request or certificate payloads
(_never_, _reply, _request_ or _both_).
Send OCSP status requests in certificate request payloads and/or send OCSP
status response in certificate payloads when using certificate
authentication. With the default of _reply_ the daemon sends OCSP status
responses in certificate payloads if an OCSP status request has been
received in a certificate request, _never_ disables sending of OCSP status
requests and responses altogether, _request_ causes OCSP status requests in
certificate request payloads to be sent whenever certificate authentication
is used, _both_ combines _reply_ and _request_.
connections.<conn>.ppk_id =
String identifying the Postquantum Preshared Key (PPK) to be used.