summaryrefslogtreecommitdiff
path: root/interface-definitions/include/ip-protocol.xml.i
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2024-06-09 14:39:45 +0200
committerMergify <37929162+mergify[bot]@users.noreply.github.com>2024-06-10 08:28:55 +0000
commit4485aa56a8bc5e37a1ecc7caaab10eeb354c76ab (patch)
tree51091ca54b87ff0161d8f4de74f6b50c394f7202 /interface-definitions/include/ip-protocol.xml.i
parent2d98f3b17e1146db6362e302d28474fb6f5520e6 (diff)
downloadvyos-1x-4485aa56a8bc5e37a1ecc7caaab10eeb354c76ab.tar.gz
vyos-1x-4485aa56a8bc5e37a1ecc7caaab10eeb354c76ab.zip
op-mode: T6424: ipsec: honor certificate CN and CA chain during profile generation
In e6fe6e50a5c ("op-mode: ipsec: T6407: fix profile generation") we fixed support for multiple CAs when dealing with the generation of Apple IOS profiles. This commit extends support to properly include the common name of the server certificate issuer and all it's paren't CAs. A list of parent CAs is automatically generated from the "PKI" subsystem content and embedded into the resulting profile. (cherry picked from commit d65f43589612c30dfaa5ce30aca5b8b48bf73211)
Diffstat (limited to 'interface-definitions/include/ip-protocol.xml.i')
0 files changed, 0 insertions, 0 deletions