diff options
| author | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2024-03-28 14:06:33 +0100 |
|---|---|---|
| committer | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2024-03-28 14:34:26 +0100 |
| commit | 952b1656f5164f6cfc601e040b48384859e7a222 (patch) | |
| tree | eedfe5d82c5a4876edc5cc825f9cbffff08268c1 /interface-definitions/include/ipsec | |
| parent | 889c1a81a9e291a276e35617f1d77f9f9bd4b194 (diff) | |
| download | vyos-1x-952b1656f5164f6cfc601e040b48384859e7a222.tar.gz vyos-1x-952b1656f5164f6cfc601e040b48384859e7a222.zip | |
ipsec: T5606: T5871: Use multi node for CA certificates
This changes behaviour from fetching CA chain in PKI, to the user manually setting CA certificates.
Prevents unwanted parent CAs existing in PKI from being auto-included as may not be desired/intended.
Diffstat (limited to 'interface-definitions/include/ipsec')
| -rw-r--r-- | interface-definitions/include/ipsec/authentication-x509.xml.i | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/interface-definitions/include/ipsec/authentication-x509.xml.i b/interface-definitions/include/ipsec/authentication-x509.xml.i index db675c0bf..1d04c94ba 100644 --- a/interface-definitions/include/ipsec/authentication-x509.xml.i +++ b/interface-definitions/include/ipsec/authentication-x509.xml.i @@ -5,7 +5,7 @@ </properties> <children> #include <include/pki/certificate-key.xml.i> - #include <include/pki/ca-certificate.xml.i> + #include <include/pki/ca-certificate-multi.xml.i> </children> </node> <!-- include end --> |