diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2011-05-04 18:23:00 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2011-05-05 10:30:51 +0200 |
| commit | bf3c371531f8f79492ac10796c03299beb24f17d (patch) | |
| tree | 65a3b1ce330fd9b9a8401f9b0f0963ee93c94727 | |
| parent | a855af9544d0061cdc5627eedf9d867c4dc4d9d4 (diff) | |
| download | strongswan-bf3c371531f8f79492ac10796c03299beb24f17d.tar.bz2 strongswan-bf3c371531f8f79492ac10796c03299beb24f17d.tar.xz | |
Note about certificates added to CA section in ipsec.conf man page.
| -rw-r--r-- | man/ipsec.conf.5.in | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in index 60b6d173c..295100444 100644 --- a/man/ipsec.conf.5.in +++ b/man/ipsec.conf.5.in @@ -1043,8 +1043,11 @@ is not given, the of this connection will be used as peer ID. .SH "CA SECTIONS" -This are optional sections that can be used to assign special -parameters to a Certification Authority (CA). +These are optional sections that can be used to assign special +parameters to a Certification Authority (CA). Because the daemons +automatically import CA certificates from \fI/etc/ipsec.d/cacerts\fP, +there is no need to explicitly add them with a CA section, unless you +want to assign special parameters (like a CRL) to a CA. .TP .BR also " = <name>" includes ca section |