diff options
| author | Chris Buechler <cmb@pfsense.org> | 2016-04-23 03:39:11 -0500 |
|---|---|---|
| committer | Chris Buechler <cmb@pfsense.org> | 2016-04-23 03:39:11 -0500 |
| commit | 7951cab49fc23d8a3f919a60b684cd4d7d833e5e (patch) | |
| tree | 535dedf49d98656c6c1b41f2fe0560149444717f /src | |
| parent | 35c8b89170a203ee72225e056351f4b3105d81ff (diff) | |
| download | pfsense-7951cab49fc23d8a3f919a60b684cd4d7d833e5e.zip pfsense-7951cab49fc23d8a3f919a60b684cd4d7d833e5e.tar.gz | |
Use leftsendcert=always where leftcert is defined. Ticket #6082
Diffstat (limited to 'src')
| -rw-r--r-- | src/etc/inc/vpn.inc | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/etc/inc/vpn.inc b/src/etc/inc/vpn.inc index bca533e..f6d2fd5 100644 --- a/src/etc/inc/vpn.inc +++ b/src/etc/inc/vpn.inc @@ -1113,6 +1113,7 @@ EOD; $authentication .= "\n\trightauth2 = xauth-generic"; if (!empty($ph1ent['certref'])) { $authentication .= "\n\tleftcert={$certpath}/cert-{$ph1ent['ikeid']}.crt"; + $authentication .= "\n\tleftsendcert=always"; } if (isset($casub)) { $authentication .= "\n\trightca=\"$casub\""; @@ -1129,6 +1130,7 @@ EOD; $authentication = "leftauth = pubkey\n\trightauth = pubkey"; if (!empty($ph1ent['certref'])) { $authentication .= "\n\tleftcert={$certpath}/cert-{$ph1ent['ikeid']}.crt"; + $authentication .= "\n\tleftsendcert=always"; } if (isset($casub)) { $authentication .= "\n\trightca=\"$casub\""; @@ -1138,6 +1140,7 @@ EOD; $authentication = "leftauth = pubkey\n\trightauth = xauth-generic"; if (!empty($ph1ent['certref'])) { $authentication .= "\n\tleftcert={$certpath}/cert-{$ph1ent['ikeid']}.crt"; + $authentication .= "\n\tleftsendcert=always"; } break; } |
