denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added an option to load CA certificates without CA basic constraint.

Browse Source 
Enabling this option treats all certificates in ipsec.d/cacerts and
ipsec.conf ca sections as CA certificates even if they do not contain a
CA basic constraint.
This commit is contained in:
Tobias Brunner
2012-02-01 14:34:52 +01:00
parent a895801270
commit 9ec66bc1a5
2 changed files with 38 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
man/strongswan.conf.5.in
+4
View File
@@ -469,6 +469,10 @@ Database URI for charons SQL plugin
.BR charon.plugins.sql.loglevel " [-1]"
Loglevel for logging to SQL database
.TP
.BR charon.plugins.stroke.ignore_missing_ca_basic_constraint " [no]"
Treat certificates in ipsec.d/cacerts and ipsec.conf ca sections as CA
certificates even if they don't contain a CA basic constraint.
.TP
.BR charon.plugins.stroke.max_concurrent " [4]"
Maximum number of stroke messages handled concurrently
.TP