denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

identification: Clarify that ID_USER_FQDN is just an alias for ID_RFC822_ADDR

Browse Source 
This means userfqdn: is a valid prefix for regular expressions.
This commit is contained in:
Tobias Brunner
2025-06-20 10:37:40 +02:00
parent e58ef258b5
commit a153626af7
4 changed files with 12 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/swanctl/swanctl.opt
+4 -3
View File
@@ -537,11 +537,12 @@ connections.<conn>.remote<suffix>.id = %any
Extended POSIX regular expressions are also supported for remote identity
matching. They must start with an explicit type prefix, followed by a caret
character ('^'), and end with a dollar sign ('$') to indicate an anchored
pattern. Supported types are _rfc822_, _email_, _fqdn_, _dns_, and _asn1dn_.
pattern. Make sure to escape backslash characters when configuring
identities in double quotes. Supported types are _rfc822_, _email_,
_userfqdn_, _fqdn_, _dns_, and _asn1dn_.
While regular expressions are always matched against the string
representation of other identities, the type must match as well. The
matching is performed case insensitive. Make sure to escape backslash
characters when configuring identities in double quotes. Examples:
matching is performed case insensitive. Examples:
_email:^(moon|sun)@strongswan\.org$_, _fqdn:^vpn[0-9]+\.strongswan\.org$_,
_"asn1dn:^.*CN=.+\\.strongswan\\.org$"_.