auth-cfg: Make IKE signature schemes configurable
This also restores the charon.signature_authentication_constraints functionality, that is, if no explicit IKE signature schemes are configured we apply all regular signature constraints as IKE constraints.
This commit is contained in:
@@ -187,8 +187,10 @@ struct auth_cfg_t {
|
||||
* Add public key and signature scheme constraints to the set.
|
||||
*
|
||||
* @param constraints constraints string (e.g. "rsa-sha384")
|
||||
* @param ike whether to add/parse constraints for IKE signatures
|
||||
*/
|
||||
void (*add_pubkey_constraints)(auth_cfg_t *this, char *constraints);
|
||||
void (*add_pubkey_constraints)(auth_cfg_t *this, char *constraints,
|
||||
bool ike);
|
||||
|
||||
/**
|
||||
* Get a rule value.
|
||||
|
||||
Reference in New Issue
Block a user