denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

stroke: Add an option to disable side-swapping of configuration options

Browse Source 
In some scenarios it might be preferred to ensure left is always local
and no unintended swaps occur.
This commit is contained in:
Tobias Brunner
2015-08-21 18:19:26 +02:00
parent a5c07be058
commit 8212f3d9a4
2 changed files with 51 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf/plugins/stroke.opt
+5
View File
@@ -1,3 +1,8 @@
charon.plugins.stroke.allow_swap = yes
Analyze addresses/hostnames in _left|right_ to detect which side is local
and swap configuration options if necessary. If disabled _left_ is always
_local_.
charon.plugins.stroke.ignore_missing_ca_basic_constraint = no
Treat certificates in ipsec.d/cacerts and ipsec.conf ca sections as CA
certificates even if they don't contain a CA basic constraint.