From: Michael Tremer <michael.tremer@ipfire.org>
Date: Thu, 5 Mar 2020 13:48:21 +0000 (+0000)
Subject: IPsec: Apple: Enable PFS on client when enabled
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=b75d92100cb17a28007029fb14e6503b93a8b329;p=people%2Fms%2Fipfire-2.x.git

IPsec: Apple: Enable PFS on client when enabled

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/html/cgi-bin/vpnmain.cgi b/html/cgi-bin/vpnmain.cgi
index 09acbdaabc..9ff5f62b08 100644
--- a/html/cgi-bin/vpnmain.cgi
+++ b/html/cgi-bin/vpnmain.cgi
@@ -1257,6 +1257,13 @@ END
 	print "					<key>RemoteAddress</key>\n";
 	print "					<string>$endpoint</string>\n";
 
+	# PFS
+	my $pfs = $confighash{$key}[28];
+	if ($pfs eq "on") {
+		print "					<key>EnablePFS</key>\n";
+		print "					<true/>\n";
+	}
+
 	# Left ID
 	if ($confighash{$key}[9]) {
 		print "					<key>LocalIdentifier</key>\n";