diff options
| author | Daniil Baturin <daniil@vyos.io> | 2025-11-25 15:24:28 +0000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-11-25 15:24:28 +0000 |
| commit | b49997d81c07431038720bed0ac178d08c40fb62 (patch) | |
| tree | 6fb82dff38bb25ae52ddc71f174e165e11414073 /data | |
| parent | 48fe045a75a52e40217be4ba5a9696bc9ed2111b (diff) | |
| parent | 090c4afe8dce25f772c24fc9bb6e3b96d23fcc2b (diff) | |
| download | vyos-1x-b49997d81c07431038720bed0ac178d08c40fb62.tar.gz vyos-1x-b49997d81c07431038720bed0ac178d08c40fb62.zip | |
Merge pull request #4859 from cpcowart/cpcowart/send-cert-always
T8027: vpn: adding config for swanctl "send-cert always"
Diffstat (limited to 'data')
| -rw-r--r-- | data/templates/ipsec/swanctl/remote_access.j2 | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/data/templates/ipsec/swanctl/remote_access.j2 b/data/templates/ipsec/swanctl/remote_access.j2 index c79f292b4..d06b3d74b 100644 --- a/data/templates/ipsec/swanctl/remote_access.j2 +++ b/data/templates/ipsec/swanctl/remote_access.j2 @@ -8,6 +8,9 @@ proposals = {{ ike_group[rw_conf.ike_group] | get_esp_ike_cipher | join(',') }} version = {{ ike.key_exchange[4:] if ike.key_exchange is vyos_defined else "0" }} send_certreq = no +{% if rw_conf.authentication.always_send_cert is vyos_defined %} + send_cert = always +{% endif %} {% if ike.dead_peer_detection is vyos_defined %} dpd_timeout = {{ ike.dead_peer_detection.timeout }} dpd_delay = {{ ike.dead_peer_detection.interval }} |