denozord/strongswan-ext
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

updated documentation on leftsendcert

Browse Source
This commit is contained in:
Andreas Steffen authored and Martin Willi committed 2009-06-09 11:03:33 +02:00
1 parent b6f19a6ab4
commit 123fdf700a
2 files changed
+6 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

README
+5 -1
View File
@@ -1510,7 +1510,11 @@ the other side. In these cases it is recommended to add
to the connection definition[s] in order to avoid the sending of the host's to the connection definition[s] in order to avoid the sending of the host's
own certificate. The default value is own certificate. The default value is
leftsendcert=always. leftsendcert=ifasked
If a peer does not send a certificate request then use the setting
leftsendcert=always
If a peer certificate contains a subjectAltName extension, then an alternative If a peer certificate contains a subjectAltName extension, then an alternative
rightid type can be used, as the example "conn sun" shows. If no rightid rightid type can be used, as the example "conn sun" shows. If no rightid
src/pluto/constants.h
+1 -1
View File
@@ -703,7 +703,7 @@ extern enum_names cert_type_names;
extern enum_name_t *cert_policy_names; extern enum_name_t *cert_policy_names;
typedef enum certpolicy { typedef enum certpolicy {
CERT_ALWAYS_SEND = 0, /* the default */ CERT_ALWAYS_SEND = 0,
CERT_SEND_IF_ASKED = 1, CERT_SEND_IF_ASKED = 1,
CERT_NEVER_SEND = 2, CERT_NEVER_SEND = 2,