denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

vici: Add support to load certificates from file paths

Browse Source 
Probably not that useful via swanctl.conf but could be when used via VICI.
This commit is contained in:
Tobias Brunner
2017-02-16 19:24:08 +01:00
parent 00bf6a2a49
commit 2f8354ca6c
2 changed files with 68 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/swanctl/swanctl.opt
+36
View File
@@ -299,9 +299,21 @@ connections.<conn>.local<suffix>.cert<suffix> =
in _certs_ are transmitted as binary blobs, these sections offer more
flexibility.
connections.<conn>.local<suffix>.cert<suffix>.file =
Absolute path to the certificate to load.
Absolute path to the certificate to load. Passed as-is to the daemon, so it
must be readable by it.
Configure either this or _handle_, but not both, in one section.
connections.<conn>.local<suffix>.cert<suffix>.handle =
Hex-encoded CKA_ID of the certificate on a token.
Hex-encoded CKA_ID of the certificate on a token.
Configure either this or _file_, but not both, in one section.
connections.<conn>.local<suffix>.cert<suffix>.slot =
Optional slot number of the token that stores the certificate.
@@ -442,9 +454,21 @@ connections.<conn>.remote<suffix>.cert<suffix> =
in _certs_ are transmitted as binary blobs, these sections offer more
flexibility.
connections.<conn>.remote<suffix>.cert<suffix>.file =
Absolute path to the certificate to load.
Absolute path to the certificate to load. Passed as-is to the daemon, so it
must be readable by it.
Configure either this or _handle_, but not both, in one section.
connections.<conn>.remote<suffix>.cert<suffix>.handle =
Hex-encoded CKA_ID of the certificate on a token.
Hex-encoded CKA_ID of the certificate on a token.
Configure either this or _file_, but not both, in one section.
connections.<conn>.remote<suffix>.cert<suffix>.slot =
Optional slot number of the token that stores the certificate.
@@ -465,9 +489,21 @@ connections.<conn>.remote<suffix>.cacert<suffix> =
in _cacerts_ are transmitted as binary blobs, these sections offer more
flexibility.
connections.<conn>.remote<suffix>.cacert<suffix>.file =
Absolute path to the certificate to load.
Absolute path to the certificate to load. Passed as-is to the daemon, so it
must be readable by it.
Configure either this or _handle_, but not both, in one section.
connections.<conn>.remote<suffix>.cacert<suffix>.handle =
Hex-encoded CKA_ID of the CA certificate on a token.
Hex-encoded CKA_ID of the CA certificate on a token.
Configure either this or _file_, but not both, in one section.
connections.<conn>.remote<suffix>.cacert<suffix>.slot =
Optional slot number of the token that stores the CA certificate.