ipsec.conf: ca Reference » History » Version 6
Tobias Brunner, 18.04.2008 13:54
certuribase added
| 1 | 1 | Martin Willi | |
|---|---|---|---|
| 2 | 6 | Tobias Brunner | h1. ca <name> |
| 3 | 6 | Tobias Brunner | |
| 4 | 6 | Tobias Brunner | |
| 5 | 6 | Tobias Brunner | * _also = _<section name> |
| 6 | 1 | Martin Willi | includes ca section <name>. |
| 7 | 1 | Martin Willi | |
| 8 | 6 | Tobias Brunner | * _auto = *ignore*|add_ |
| 9 | 1 | Martin Willi | |
| 10 | 6 | Tobias Brunner | * _cacert = _<path> |
| 11 | 6 | Tobias Brunner | defines a path to the CA certificate either relative to _/etc/ipsec.d/cacerts_ or as an absolute path. |
| 12 | 1 | Martin Willi | |
| 13 | 6 | Tobias Brunner | * _crluri = _<uri> |
| 14 | 1 | Martin Willi | defines a CRL distribution point (ldap, http, or file URI). |
| 15 | 1 | Martin Willi | |
| 16 | 6 | Tobias Brunner | * _crluri1 = _<uri> |
| 17 | 6 | Tobias Brunner | synonym for _crluri_. |
| 18 | 4 | Martin Willi | |
| 19 | 6 | Tobias Brunner | * _crluri2 = _<uri> |
| 20 | 1 | Martin Willi | defines an alternative CRL distribution point (ldap, http, or file URI). |
| 21 | 3 | Martin Willi | |
| 22 | 6 | Tobias Brunner | * _ldaphost = _<hostname> |
| 23 | 1 | Martin Willi | defines an ldap host. Currently used by IKEv1 only. |
| 24 | 3 | Martin Willi | |
| 25 | 6 | Tobias Brunner | * _ocspuri = _<uri> |
| 26 | 1 | Martin Willi | defines an OCSP URI. |
| 27 | 3 | Martin Willi | |
| 28 | 6 | Tobias Brunner | * _ocspuri1 = _<uri> |
| 29 | 6 | Tobias Brunner | synonym for _ocspuri_. |
| 30 | 3 | Martin Willi | |
| 31 | 6 | Tobias Brunner | * _ocspuri2 = _<uri> |
| 32 | 5 | Tobias Brunner | defines an alternative OCSP URI. Currently used by IKEv2 only. |
| 33 | 5 | Tobias Brunner | |
| 34 | 6 | Tobias Brunner | * _certuribase = _<uri> |
| 35 | 5 | Tobias Brunner | defines the base URI for the Hash and URL feature supported by IKEv2. |
| 36 | 5 | Tobias Brunner | Instead of exchanging complete certificates, IKEv2 allows to send an URI |
| 37 | 5 | Tobias Brunner | that resolves to the DER encoded certificate. The certificate URIs are built |
| 38 | 1 | Martin Willi | by appending the SHA1 hash of the DER encoded certificates to this base URI. |