From 6cfcef98b8a8fbfa107ecfbb741cfb268ea8340f Mon Sep 17 00:00:00 2001
From: Lucas Christian <lucas@lucasec.com>
Date: Thu, 28 Dec 2023 22:07:07 -0800
Subject: T5870: ipsec remote access VPN: add x509 ("pubkey") authentication.

(cherry picked from commit 656934e85cee799dba5b495d143f6be445ac22d5)
---
 interface-definitions/vpn-ipsec.xml.in | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

(limited to 'interface-definitions/vpn-ipsec.xml.in')

diff --git a/interface-definitions/vpn-ipsec.xml.in b/interface-definitions/vpn-ipsec.xml.in
index 64cfbda08..1847401b5 100644
--- a/interface-definitions/vpn-ipsec.xml.in
+++ b/interface-definitions/vpn-ipsec.xml.in
@@ -772,8 +772,12 @@
                         <properties>
                           <help>Client authentication mode</help>
                           <completionHelp>
-                            <list>eap-tls eap-mschapv2 eap-radius</list>
+                            <list>x509 eap-tls eap-mschapv2 eap-radius</list>
                           </completionHelp>
+                          <valueHelp>
+                            <format>x509</format>
+                            <description>Use IPsec x.509 certificate authentication</description>
+                          </valueHelp>
                           <valueHelp>
                             <format>eap-tls</format>
                             <description>Use EAP-TLS authentication</description>
@@ -787,7 +791,7 @@
                             <description>Use EAP-RADIUS authentication</description>
                           </valueHelp>
                           <constraint>
-                            <regex>(eap-tls|eap-mschapv2|eap-radius)</regex>
+                            <regex>(x509|eap-tls|eap-mschapv2|eap-radius)</regex>
                           </constraint>
                         </properties>
                         <defaultValue>eap-mschapv2</defaultValue>
-- 
cgit v1.2.3