summaryrefslogtreecommitdiff
path: root/data/templates/ipsec/swanctl
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2021-07-03 19:08:18 +0200
committerChristian Poessinger <christian@poessinger.com>2021-07-03 19:09:47 +0200
commit2aec3e61c9130e942cb766aa0e5f4acf900dc921 (patch)
tree9d04ea091cd62782cfaef40b8f57da228d5f6178 /data/templates/ipsec/swanctl
parent32fab6c7c5a7d8ad926513fcc5a5c637b77769e3 (diff)
downloadvyos-1x-2aec3e61c9130e942cb766aa0e5f4acf900dc921.tar.gz
vyos-1x-2aec3e61c9130e942cb766aa0e5f4acf900dc921.zip
ipsec: T2816: provide x509 certificate base auth building blocks
Diffstat (limited to 'data/templates/ipsec/swanctl')
-rw-r--r--data/templates/ipsec/swanctl/peer.tmpl2
1 files changed, 1 insertions, 1 deletions
diff --git a/data/templates/ipsec/swanctl/peer.tmpl b/data/templates/ipsec/swanctl/peer.tmpl
index b35cd4b60..4ace06701 100644
--- a/data/templates/ipsec/swanctl/peer.tmpl
+++ b/data/templates/ipsec/swanctl/peer.tmpl
@@ -31,7 +31,7 @@
encap = yes
{% endif %}
local {
-{% if peer_conf.authentication.id is defined and peer_conf.authentication.use_x509_id is not defined %}
+{% if peer_conf.authentication is defined and peer_conf.authentication.id is defined and peer_conf.authentication.use_x509_id is not defined %}
id = "{{ peer_conf.authentication.id }}"
{% endif %}
auth = {{ 'psk' if peer_conf.authentication.mode == 'pre-shared-secret' else 'pubkey' }}