denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add documentation for signature hash algorithm enforcing to man ipsec.conf

Browse Source
This commit is contained in:
Martin Willi
2012-06-12 15:01:39 +02:00
parent e35bbb9740
commit 7c4214bd38
1 changed files with 11 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
man/ipsec.conf.5.in
+11 -4
View File
@@ -485,12 +485,19 @@ to (require the) use of the Extensible Authentication Protocol in IKEv2, and
.B xauth .B xauth
for IKEv1 eXtended Authentication. for IKEv1 eXtended Authentication.
To require a trustchain public key strength for the remote side, specify the To require a trustchain public key strength for the remote side, specify the
key type followed by the strength in bits (for example key type followed by the minimum strength in bits (for example
.BR rsa-2048 .BR ecdsa-384
or or
.BR ecdsa-256 ). .BR rsa-2048-ecdsa-256 ).
To limit the acceptable set of hashing algorithms for trustchain validation,
append hash algorithms to
.BR pubkey
or a key strength definition (for example
.BR pubkey-sha1-sha256
or
.BR rsa-2048-ecdsa-256-sha256-sha384-sha512 ).
For For
.B eap, .B eap ,
an optional EAP method can be appended. Currently defined methods are an optional EAP method can be appended. Currently defined methods are
.BR eap-aka , .BR eap-aka ,
.BR eap-sim , .BR eap-sim ,