aboutsummaryrefslogtreecommitdiffstats
path: root/man/ipsec.conf.5.in
diff options
context:
space:
mode:
authorMartin Willi <martin@revosec.ch>2013-01-08 14:58:18 +0100
committerMartin Willi <martin@revosec.ch>2013-01-18 09:33:15 +0100
commit11a7abf5546e139552dcb90c5940860c9b2242e9 (patch)
tree1758e97aeef06aa4b4e667ce9d1c27553e4aba33 /man/ipsec.conf.5.in
parent9a06a93ce7195a14b0e33d68e127c9207b14878f (diff)
downloadstrongswan-11a7abf5546e139552dcb90c5940860c9b2242e9.tar.bz2
strongswan-11a7abf5546e139552dcb90c5940860c9b2242e9.tar.xz
Add ipsec.conf.5 updates regarding multiple certificates in leftcert
Diffstat (limited to 'man/ipsec.conf.5.in')
-rw-r--r--man/ipsec.conf.5.in4
1 files changed, 4 insertions, 0 deletions
diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in
index 2766cc4ed..7144a1353 100644
--- a/man/ipsec.conf.5.in
+++ b/man/ipsec.conf.5.in
@@ -613,6 +613,10 @@ connection. See ipsec.secrets(5) for details about smartcard definitions.
is required only if selecting the certificate with
.B leftid
is not sufficient, for example if multiple certificates use the same subject.
+.br
+Multiple certificate paths or PKCS#11 backends can be specified in a comma
+separated list. The daemon chooses the certificate based on the received
+certificate requests if possible before enforcing the first.
.TP
.BR leftcert2 " = <path>"
Same as