strongswan: Add support for send_cert option

This option is required by some clients, e.g. iOS.

Signed-off-by: Martin Pecka <peci1@seznam.cz>
This commit is contained in:
Martin Pecka
2024-01-07 23:00:07 +01:00
committed by Philip Prindeville
parent a2cae1facd
commit 4b9453b9a4

View File

@@ -466,6 +466,7 @@ config_remote() {
config_get ca_cert "$conf" ca_cert ""
config_get rekeytime "$conf" rekeytime
config_get overtime "$conf" overtime
config_get send_cert "$conf" send_cert
config_list_foreach "$conf" local_sourceip append_var local_sourceip ","
config_list_foreach "$conf" remote_ca_certs append_var remote_ca_certs ","
@@ -560,6 +561,8 @@ config_remote() {
;;
esac
[ -n "$send_cert" ] && swanctl_xappend2 "send_cert = $send_cert"
[ $mobike -eq 1 ] && swanctl_xappend2 "mobike = yes" || swanctl_xappend2 "mobike = no"
if [ -n "$rekeytime" ]; then