From: Tobias Brunner <tobias@strongswan.org>
Date: Thu, 3 Nov 2011 17:36:34 +0000 (+0100)
Subject: pkcs11: Documented use_pubkey option in strongswan.conf(5).
X-Git-Tag: 4.6.0~20
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=53e2fc690e6e0a88b1c2c02eb14e7b64218b1121;p=thirdparty%2Fstrongswan.git

pkcs11: Documented use_pubkey option in strongswan.conf(5).
---

diff --git a/man/strongswan.conf.5.in b/man/strongswan.conf.5.in
index ffe881a9bc..fdc13c1723 100644
--- a/man/strongswan.conf.5.in
+++ b/man/strongswan.conf.5.in
@@ -549,14 +549,19 @@ ENGINE ID to use in the OpenSSL plugin
 List of available PKCS#11 modules
 .TP
 .BR libstrongswan.plugins.pkcs11.use_dh " [no]"
-Whether the PKCS#11 modules should be used for DH/ECDH (see use_ecc option)
+Whether the PKCS#11 modules should be used for DH and ECDH (see use_ecc option)
 .TP
 .BR libstrongswan.plugins.pkcs11.use_ecc " [no]"
-Whether the PKCS#11 modules should be used for ECDH/ECDSA
+Whether the PKCS#11 modules should be used for ECDH and ECDSA public key
+operations. ECDSA private keys can be used regardless of this option
 .TP
 .BR libstrongswan.plugins.pkcs11.use_hasher " [no]"
 Whether the PKCS#11 modules should be used to hash data
 .TP
+.BR libstrongswan.plugins.pkcs11.use_pubkey " [no]"
+Whether the PKCS#11 modules should be used for public key operations, even for
+keys not stored on tokens
+.TP
 .BR libstrongswan.plugins.pkcs11.use_rng " [no]"
 Whether the PKCS#11 modules should be used as RNG
 .SS libtnccs section