aboutsummaryrefslogtreecommitdiffstats
path: root/man
diff options
context:
space:
mode:
authorMartin Willi <martin@revosec.ch>2015-01-29 11:41:08 +0100
committerMartin Willi <martin@revosec.ch>2015-03-03 14:08:01 +0100
commitf2e2cce2aad63e76643507c87d67e95367fdfdf9 (patch)
treead05fab3be9de31e0f724ab09f79f05c88fafffc /man
parentf6b5952b322760e40f62c31af4ccc897b7b2c46a (diff)
downloadstrongswan-f2e2cce2aad63e76643507c87d67e95367fdfdf9.tar.bz2
strongswan-f2e2cce2aad63e76643507c87d67e95367fdfdf9.tar.xz
man: Describe trust chain constraints configuration for EAP methods
Diffstat (limited to 'man')
-rw-r--r--man/ipsec.conf.5.in4
1 files changed, 3 insertions, 1 deletions
diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in
index 851bd1750..696c6a12f 100644
--- a/man/ipsec.conf.5.in
+++ b/man/ipsec.conf.5.in
@@ -614,7 +614,9 @@ Alternatively, IANA assigned EAP method numbers are accepted. Vendor specific
EAP methods are defined in the form
.B eap-type-vendor
.RB "(e.g. " eap-7-12345 ).
-For
+To specify signature and trust chain constraints for EAP-(T)TLS, append a colon
+to the EAP method, followed by the key type/size and hash algorithm as discussed
+above. For
.B xauth,
an XAuth authentication backend can be specified, such as
.B xauth-generic