man: Fix documentation of pubkey constraints

Hash algorithms have to be repeated for multiple key types. References #2514.
2018-02-09 10:42:13 +01:00
parent bb58dfb9b5
commit e698bdea24
2 changed files with 6 additions and 4 deletions
@@ -609,9 +609,10 @@ To limit the acceptable set of hashing algorithms for trustchain validation,
 append hash algorithms to
 .BR pubkey
 or a key strength definition (for example
-.BR pubkey-sha1-sha256
+.BR pubkey-sha256-sha512 ,
+.BR rsa-2048-sha256-sha384-sha512 ,
 or
-.BR rsa-2048-ecdsa-256-sha256-sha384-sha512 ).
+.BR rsa-2048-sha256-ecdsa-256-sha256-sha384 ).
 Unless disabled in
 .BR strongswan.conf (5),
 or explicit IKEv2 signature constraints are configured (see below), such key