diff options
| author | Martin Willi <martin@strongswan.org> | 2017-02-22 09:43:31 +0100 |
|---|---|---|
| committer | Martin Willi <martin@strongswan.org> | 2017-03-02 08:24:02 +0100 |
| commit | d1317adb9a45166cdc8f44117a5fa85ecd053552 (patch) | |
| tree | c8e856c9269fc1f00b8e6122f973f52f20bf8901 /src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c | |
| parent | da82786b2d8cef68ca6462bf7898a6b19c0b4608 (diff) | |
| download | strongswan-d1317adb9a45166cdc8f44117a5fa85ecd053552.tar.bz2 strongswan-d1317adb9a45166cdc8f44117a5fa85ecd053552.tar.xz | |
addrblock: Support an optional non-strict mode accepting certs without addrblock
This allows a gateway to enforce the addrblock policy on certificates that
actually have the extension only. For (legacy) certificates not having the
extension, traffic selectors are validated/narrowed by other means, most
likely by the configuration.
Diffstat (limited to 'src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c')
0 files changed, 0 insertions, 0 deletions