ipsec.conf: ca Reference » History » Version 4
Version 3 (Martin Willi, 02.09.2007 08:54) → Version 4/18 (Martin Willi, 02.09.2007 09:00)
= ca <name> =
* ''also = ''<section name>
includes ca section <name>.
* ''auto = '''ignore'''|add''
* ''cacert = ''<path>
defines a path to the CA certificate either relative to ''/etc/ipsec.d/cacerts'' or as an absolute path.
* ''crluri = ''<uri>
defines a CRL distribution point (ldap, http, or file URI).
* ''crluri1 = ''<uri>
synonym for ''crluri''.
* ''crluri2 = ''<uri>
defines an alternative CRL distribution point (ldap, http, or file URI).
* ''ldaphost = ''<hostname>
defines an ldap host. Currently used by IKEv1 only.
* ''ocspuri = ''<uri>
defines an OCSP URI.
* ''ocspuri1 = ''<uri>
synonym for ''ocspuri''.
* ''ocspuri2 = ''<uri>
defines an alternative OCSP URI. Currently used by IKEv2 only.
* ''also = ''<section name>
includes ca section <name>.
* ''auto = '''ignore'''|add''
* ''cacert = ''<path>
defines a path to the CA certificate either relative to ''/etc/ipsec.d/cacerts'' or as an absolute path.
* ''crluri = ''<uri>
defines a CRL distribution point (ldap, http, or file URI).
* ''crluri1 = ''<uri>
synonym for ''crluri''.
* ''crluri2 = ''<uri>
defines an alternative CRL distribution point (ldap, http, or file URI).
* ''ldaphost = ''<hostname>
defines an ldap host. Currently used by IKEv1 only.
* ''ocspuri = ''<uri>
defines an OCSP URI.
* ''ocspuri1 = ''<uri>
synonym for ''ocspuri''.
* ''ocspuri2 = ''<uri>
defines an alternative OCSP URI. Currently used by IKEv2 only.