summaryrefslogtreecommitdiffstats
path: root/usr/local/www/vpn_ipsec_phase1.php
diff options
context:
space:
mode:
authorVinicius Coque <vinicius.coque@bluepex.com>2011-06-28 16:55:51 -0300
committerVinicius Coque <vinicius.coque@bluepex.com>2011-06-28 16:55:51 -0300
commit4842755397c92f1c16b50b16e01b28768f8b43c1 (patch)
tree97f0dbf4361974041eccfd6bbf50d5c44836942d /usr/local/www/vpn_ipsec_phase1.php
parentf0b17f3f7226f819c94dfab4c9abc0f3e4962152 (diff)
parent84924e76c44950387e387af7927f63d5822dfda4 (diff)
downloadpfsense-4842755397c92f1c16b50b16e01b28768f8b43c1.zip
pfsense-4842755397c92f1c16b50b16e01b28768f8b43c1.tar.gz
Merge remote-tracking branch 'mainline/master' into inc
Diffstat (limited to 'usr/local/www/vpn_ipsec_phase1.php')
-rw-r--r--usr/local/www/vpn_ipsec_phase1.php5
1 files changed, 5 insertions, 0 deletions
diff --git a/usr/local/www/vpn_ipsec_phase1.php b/usr/local/www/vpn_ipsec_phase1.php
index b4890ad..8ec2504 100644
--- a/usr/local/www/vpn_ipsec_phase1.php
+++ b/usr/local/www/vpn_ipsec_phase1.php
@@ -139,6 +139,11 @@ if ($_POST) {
/* input validation */
$method = $pconfig['authentication_method'];
+ // Unset ca and cert if not required to avaoid storing in config
+ if ($method == "pre_shared_key" || method == "xauth_psk_server"){
+ unset($pconfig['caref']);
+ unset($pconfig['certref']);
+ }
// Only require PSK here for normal PSK tunnels (not mobile) or xauth.
// For RSA methods, require the CA/Cert.
OpenPOWER on IntegriCloud