denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

swanctl: Document wildcard matching for remote identities

Browse Source
This commit is contained in:
Tobias Brunner
2019-11-12 10:59:38 +01:00
parent eea58222d5
commit 7cde77c638
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/swanctl/swanctl.opt
+8 -2
View File
@@ -494,8 +494,14 @@ connections.<conn>.remote<suffix>.round = 0
connections.<conn>.remote<suffix>.id = %any connections.<conn>.remote<suffix>.id = %any
IKE identity to expect for authentication round. IKE identity to expect for authentication round.
IKE identity to expect for authentication round. Refer to the _local_ _id_ IKE identity to expect for authentication round. Refer to the **local**
section for details. section's **id** keyword for details.
It's possible to use wildcards to match remote identities (e.g.
_*@strongswan.org_, _*.strongswan.org_, or _C=CH,O=strongSwan,CN=*_).
Connections with exact matches are preferred. When using distinguished names
with wildcards, the _charon.rdn_matching_ option in **strongswan.conf**(5)
specifies how RDNs are matched.
connections.<conn>.remote<suffix>.eap_id = id connections.<conn>.remote<suffix>.eap_id = id
Identity to use as peer identity during EAP authentication. Identity to use as peer identity during EAP authentication.