auth-cfg: Make IKE signature schemes configurable

This also restores the charon.signature_authentication_constraints
functionality, that is, if no explicit IKE signature schemes are
configured we apply all regular signature constraints as IKE constraints.
This commit is contained in:
Tobias Brunner
2016-03-04 16:19:54 +01:00
parent e37e6d6dca
commit 3c23a75120
8 changed files with 203 additions and 46 deletions
+3 -1
View File
@@ -187,8 +187,10 @@ struct auth_cfg_t {
* Add public key and signature scheme constraints to the set.
*
* @param constraints constraints string (e.g. "rsa-sha384")
* @param ike whether to add/parse constraints for IKE signatures
*/
void (*add_pubkey_constraints)(auth_cfg_t *this, char *constraints);
void (*add_pubkey_constraints)(auth_cfg_t *this, char *constraints,
bool ike);
/**
* Get a rule value.