From: Martin Willi <martin@revosec.ch>
Date: Thu, 29 Jan 2015 10:41:08 +0000 (+0100)
Subject: man: Describe trust chain constraints configuration for EAP methods
X-Git-Tag: 5.3.0dr1~46^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f2e2cce2aad63e76643507c87d67e95367fdfdf9;p=thirdparty%2Fstrongswan.git

man: Describe trust chain constraints configuration for EAP methods
---

diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in
index 851bd17503..696c6a12f1 100644
--- a/man/ipsec.conf.5.in
+++ b/man/ipsec.conf.5.in
@@ -614,7 +614,9 @@ Alternatively, IANA assigned EAP method numbers are accepted. Vendor specific
 EAP methods are defined in the form
 .B eap-type-vendor
 .RB "(e.g. " eap-7-12345 ).
-For
+To specify signature and trust chain constraints for EAP-(T)TLS, append a colon
+to the EAP method, followed by the key type/size and hash algorithm as discussed
+above. For
 .B xauth,
 an XAuth authentication backend can be specified, such as
 .B xauth-generic