Updated ipsec.secrets.5 regarding IKEv2 smartcard support

diff --git a/src/pluto/ipsec.secrets.5.in b/src/pluto/ipsec.secrets.5.in
index adb915e4dc136210aa42a04791023515d03687b8..f4bb42d0dd6ed5e83d4113b05e7eb129ce19941f 100644 (file)
--- a/src/pluto/ipsec.secrets.5.in
+++ b/src/pluto/ipsec.secrets.5.in
@@ -151,13 +151,15 @@ delimited by double-quote characters (\fB"\fP).
 \fBXAUTH\fP secrets are IKEv1 only.
 .TP
 .B : PIN <smartcard selector> <pin code> | %prompt
-The format
+IKEv1 uses the format
 .B "%smartcard[<slot nr>[:<key id>]]"
-is used to specify the smartcard selector (e.g. %smartcard1:50). For IKEv1,
-instead of specifying the pin code statically,
+to specify the smartcard selector (e.g. %smartcard1:50).
+The IKEv2 daemon supports multiple modules with the format
+.B "%smartcard[<slot nr>[@<module>]]:<keyid>"
+, but always requires a keyid to uniquely select the correct key. Instead of
+specifying the pin code statically,
 .B %prompt
-can be specified, which causes the pluto daemon to ask the user for the pin
-code.
+can be specified, which causes the daemons to ask the user for the pin code.
 .LP
 
 .SH FILES