denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Updated ipsec.secrets.5 regarding IKEv2 smartcard support

Browse Source
This commit is contained in:
Martin Willi
2010-08-04 09:26:21 +02:00
parent 57522106c4
commit 1e4e29076c
1 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pluto/ipsec.secrets.5.in
+7 -5
View File
@@ -151,13 +151,15 @@ delimited by double-quote characters (\fB"\fP).
\fBXAUTH\fP secrets are IKEv1 only.
.TP
.B : PIN <smartcard selector> <pin code> | %prompt
The format
IKEv1 uses the format
.B "%smartcard[<slot nr>[:<key id>]]"
is used to specify the smartcard selector (e.g. %smartcard1:50). For IKEv1,
instead of specifying the pin code statically,
to specify the smartcard selector (e.g. %smartcard1:50).
The IKEv2 daemon supports multiple modules with the format
.B "%smartcard[<slot nr>[@<module>]]:<keyid>"
, but always requires a keyid to uniquely select the correct key. Instead of
specifying the pin code statically,
.B %prompt
can be specified, which causes the pluto daemon to ask the user for the pin
code.
can be specified, which causes the daemons to ask the user for the pin code.
.LP
.SH FILES