Add ipsec.conf.5 updates regarding multiple certificates in leftcert

diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in
index 2766cc4edffa700733ef656693b95e8ea2d3a368..7144a13536d4d9f5b1c79fa73323e9d394e1917d 100644 (file)
--- a/man/ipsec.conf.5.in
+++ b/man/ipsec.conf.5.in
@@ -613,6 +613,10 @@ connection. See ipsec.secrets(5) for details about smartcard definitions.
 is required only if selecting the certificate with
 .B leftid
 is not sufficient, for example if multiple certificates use the same subject.
+.br
+Multiple certificate paths or PKCS#11 backends can be specified in a comma
+separated list. The daemon chooses the certificate based on the received
+certificate requests if possible before enforcing the first.
 .TP
 .BR leftcert2 " = <path>"
 Same as