diff options
| author | Viacheslav Hletenko <v.gletenko@vyos.io> | 2026-01-05 17:20:02 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-01-05 17:20:02 +0200 |
| commit | 06945f0a7079b72ab3844bec77288aea208ac266 (patch) | |
| tree | 2271fa220bfe6c90f7320ffdbc0d6bf8ebcf42af /interface-definitions | |
| parent | 2e9c1ffd20a8149842a71acae062a8f0822f95dc (diff) | |
| parent | 381ae4a8ccddb524bca5951e27cc826eeef45453 (diff) | |
| download | vyos-1x-06945f0a7079b72ab3844bec77288aea208ac266.tar.gz vyos-1x-06945f0a7079b72ab3844bec77288aea208ac266.zip | |
Merge pull request #4618 from giga1699/T7635
T7635: OpenConnect Certificate Authentication
Diffstat (limited to 'interface-definitions')
| -rw-r--r-- | interface-definitions/vpn_openconnect.xml.in | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/interface-definitions/vpn_openconnect.xml.in b/interface-definitions/vpn_openconnect.xml.in index a2f040b2f..13e5142fd 100644 --- a/interface-definitions/vpn_openconnect.xml.in +++ b/interface-definitions/vpn_openconnect.xml.in @@ -69,6 +69,37 @@ <valueless/> </properties> </leafNode> + <node name="certificate"> + <properties> + <help>Use certificate-based authentication</help> + </properties> + <children> + <leafNode name="user-identifier-field"> + <properties> + <help>Certificate field to identify users by</help> + <valueHelp> + <format>cn</format> + <description>OID 2.5.4.3 - Common Name</description> + </valueHelp> + <valueHelp> + <format>uid</format> + <description>OID 0.9.2342.19200300.100.1.1 - UID</description> + </valueHelp> + <valueHelp> + <format>x.x.xx.xxx</format> + <description>Custom OID in dotted decimal format</description> + </valueHelp> + <constraint> + <regex>(^\d{1,5}(?:\.\d{1,5})*$|cn|uid)</regex> + </constraint> + <constraintErrorMessage>Invalid OID selection. Must be cn, uid, or a valid OID format.</constraintErrorMessage> + <completionHelp> + <list>cn uid x.x.xx.xxx</list> + </completionHelp> + </properties> + </leafNode> + </children> + </node> </children> </node> <node name="identity-based-config"> |