From 05e266ea9d7fb51c5d7c3dc2a3272f6b351338e4 Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Mon, 15 Oct 2012 18:14:03 +0200 Subject: [PATCH] Add leftcert ipsec.conf.5 documentation about smartcard certificates --- man/ipsec.conf.5.in | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in index ec8335c..8010049 100644 --- a/man/ipsec.conf.5.in +++ b/man/ipsec.conf.5.in @@ -589,6 +589,18 @@ to the distinguished name of the certificate's subject. The left participant's ID can be overridden by specifying a .B leftid value which must be certified by the certificate, though. +.br +A value in the form +.B %smartcard: +defines a specific certificate to load from a PKCS#11 backend for this +connection. +.B +has to be a hex encoded key identifier under which the certificate is stored +on any of the configured smartcards. +.B leftcert +is required only if selecting the certificate with +.B leftid +is not sufficient, for example if multiple certificates use the same subject. .TP .BR leftcert2 " = " Same as -- 2.7.4