Merge branch 'ikev2-signature-authentication'
authorTobias Brunner <tobias@strongswan.org>
Wed, 4 Mar 2015 12:56:50 +0000 (13:56 +0100)
committerTobias Brunner <tobias@strongswan.org>
Wed, 4 Mar 2015 12:56:50 +0000 (13:56 +0100)
commit0a8268d0f173bbddf20dc69a077d2abf3ce0d3e4
treedf0c6d792ad540ef1a340bcc3ad5fbf4875f0df0
parentdd0ebb54837298c869389d36a0b42eefdb893dd6
parent3f1ef3a678159e1523f38a3e50ccb55afc4461a4
Merge branch 'ikev2-signature-authentication'

This adds support for RFC 7427 signature authentication in IKEv2,
enabling the use of stronger signature schemes (e.g. RSA with SHA-2)
for IKE authentication.

Public key constraints defined in `rightauth` are now also checked
against IKEv2 signature schemes (may be disabled via strongswan.conf).

Fixes #863.