denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

man: Fix documentation of pubkey constraints

Browse Source 
Hash algorithms have to be repeated for multiple key types.

References #2514.
This commit is contained in:
Tobias Brunner
2018-02-09 10:42:13 +01:00
parent bb58dfb9b5
commit e698bdea24
2 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/swanctl/swanctl.opt
+3 -2
View File
@@ -587,8 +587,9 @@ connections.<conn>.remote<suffix>.auth = pubkey
key type followed by the minimum strength in bits (for example _ecdsa-384_
or _rsa-2048-ecdsa-256_). To limit the acceptable set of hashing algorithms
for trustchain validation, append hash algorithms to _pubkey_ or a key
strength definition (for example _pubkey-sha1-sha256_ or
_rsa-2048-ecdsa-256-sha256-sha384-sha512_).
strength definition (for example _pubkey-sha256-sha512_,
_rsa-2048-sha256-sha384-sha512_ or
_rsa-2048-sha256-ecdsa-256-sha256-sha384_).
Unless disabled in **strongswan.conf**(5), or explicit IKEv2 signature
constraints are configured (refer to the description of the **local**
section's **auth** keyword for details), such key types and hash algorithms