diff options
| author | Martin Willi <martin@revosec.ch> | 2011-01-07 15:38:34 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2011-01-07 15:51:35 +0100 |
| commit | 44e513a320e71e63879fef1664d19a4fe9589912 (patch) | |
| tree | 80e17210ac792cd7d12efa1318a6f36e1531d9f9 /man/ipsec.conf.5.in | |
| parent | 6367de28ad9b21cc8f145c7154cb29f5acca366a (diff) | |
| download | strongswan-44e513a320e71e63879fef1664d19a4fe9589912.tar.bz2 strongswan-44e513a320e71e63879fef1664d19a4fe9589912.tar.xz | |
Added support for trustchain key strength checking to rightauth option
Diffstat (limited to 'man/ipsec.conf.5.in')
| -rw-r--r-- | man/ipsec.conf.5.in | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in index a75b5566e..48eb136aa 100644 --- a/man/ipsec.conf.5.in +++ b/man/ipsec.conf.5.in @@ -544,8 +544,13 @@ for public key authentication (RSA/ECDSA), .B psk for pre-shared key authentication and .B eap -to (require the) use of the Extensible Authentication Protocol. In the case -of +to (require the) use of the Extensible Authentication Protocol. +To require a trustchain public key strength for the remote side, specify the +key type followed by the strength in bits (for example +.BR rsa-2048 +or +.BR ecdsa-256 ). +For .B eap, an optional EAP method can be appended. Currently defined methods are .BR eap-aka , |