denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Updated ipsec.secrets.5 regarding IKEv2 smartcard support

Browse Source
This commit is contained in:
Martin Willi
2010-08-04 09:26:21 +02:00
parent 57522106c4
commit 1e4e29076c
1 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pluto/ipsec.secrets.5.in
+7 -5
View File
@@ -151,13 +151,15 @@ delimited by double-quote characters (\fB"\fP).
\fBXAUTH\fP secrets are IKEv1 only. \fBXAUTH\fP secrets are IKEv1 only.
.TP .TP
.B : PIN <smartcard selector> <pin code> | %prompt .B : PIN <smartcard selector> <pin code> | %prompt
The format IKEv1 uses the format
.B "%smartcard[<slot nr>[:<key id>]]" .B "%smartcard[<slot nr>[:<key id>]]"
is used to specify the smartcard selector (e.g. %smartcard1:50). For IKEv1, to specify the smartcard selector (e.g. %smartcard1:50).
instead of specifying the pin code statically, The IKEv2 daemon supports multiple modules with the format
.B "%smartcard[<slot nr>[@<module>]]:<keyid>"
, but always requires a keyid to uniquely select the correct key. Instead of
specifying the pin code statically,
.B %prompt .B %prompt
can be specified, which causes the pluto daemon to ask the user for the pin can be specified, which causes the daemons to ask the user for the pin code.
code.
.LP .LP
.SH FILES .SH FILES