denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added a cert_policy option to conftest configurations

Browse Source
This commit is contained in:
Martin Willi
2011-01-05 16:46:03 +01:00
parent 5595d2bcff
commit 58be32e88e
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/conftest/config.c
+6 -1
View File
@@ -247,7 +247,7 @@ static peer_cfg_t *load_peer_config(private_config_t *this,
child_cfg_t *child_cfg;
enumerator_t *enumerator;
identification_t *lid, *rid;
char *child;
char *child, *policy;
uintptr_t strength;
ike_cfg = load_ike_config(this, settings, config);
@@ -276,6 +276,11 @@ static peer_cfg_t *load_peer_config(private_config_t *this,
{
auth->add(auth, AUTH_RULE_ECDSA_STRENGTH, strength);
}
policy = settings->get_str(settings, "configs.%s.cert_policy", NULL, config);
if (policy)
{
auth->add(auth, AUTH_RULE_CERT_POLICY, strdup(policy));
}
auth->add(auth, AUTH_RULE_IDENTITY, rid);
peer_cfg->add_auth_cfg(peer_cfg, auth, FALSE);