From: Martin Willi <martin@revosec.ch>
Date: Tue, 8 Jan 2013 13:58:18 +0000 (+0100)
Subject: Add ipsec.conf.5 updates regarding multiple certificates in leftcert
X-Git-Tag: 5.0.3dr3~37^2~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=11a7abf5546e139552dcb90c5940860c9b2242e9;p=thirdparty%2Fstrongswan.git

Add ipsec.conf.5 updates regarding multiple certificates in leftcert
---

diff --git a/man/ipsec.conf.5.in b/man/ipsec.conf.5.in
index 2766cc4edf..7144a13536 100644
--- a/man/ipsec.conf.5.in
+++ b/man/ipsec.conf.5.in
@@ -613,6 +613,10 @@ connection. See ipsec.secrets(5) for details about smartcard definitions.
 is required only if selecting the certificate with
 .B leftid
 is not sufficient, for example if multiple certificates use the same subject.
+.br
+Multiple certificate paths or PKCS#11 backends can be specified in a comma
+separated list. The daemon chooses the certificate based on the received
+certificate requests if possible before enforcing the first.
 .TP
 .BR leftcert2 " = <path>"
 Same as