denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added key strength constraints support to conftest

Browse Source
This commit is contained in:
Martin Willi
2011-01-05 16:45:53 +01:00
parent 963b4d9477
commit a73e040cd5
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/conftest/config.c
+11
View File
@@ -244,6 +244,7 @@ static peer_cfg_t *load_peer_config(private_config_t *this,
enumerator_t *enumerator;
identification_t *lid, *rid;
char *child;
uintptr_t strength;
ike_cfg = load_ike_config(this, settings, config);
peer_cfg = peer_cfg_create(config, 2, ike_cfg, CERT_ALWAYS_SEND,
@@ -261,6 +262,16 @@ static peer_cfg_t *load_peer_config(private_config_t *this,
auth->add(auth, AUTH_RULE_AUTH_CLASS, AUTH_CLASS_PUBKEY);
rid = identification_create_from_string(
settings->get_str(settings, "configs.%s.rid", "%any", config));
strength = settings->get_int(settings, "configs.%s.rsa_strength", 0);
if (strength)
{
auth->add(auth, AUTH_RULE_RSA_STRENGTH, strength);
}
strength = settings->get_int(settings, "configs.%s.ecdsa_strength", 0);
if (strength)
{
auth->add(auth, AUTH_RULE_ECDSA_STRENGTH, strength);
}
auth->add(auth, AUTH_RULE_IDENTITY, rid);
peer_cfg->add_auth_cfg(peer_cfg, auth, FALSE);