|
|
Strongswan
1: charon.plugins.addrblock.strict = yes
2: Whether to strictly require addrblock extension in subject certificates.
3:
4: If set to yes, a subject certificate without an addrblock extension is
5: rejected if the issuer certificate has such an addrblock extension. If set
6: to no, subject certificates issued without the addrblock extension are
7: accepted without any traffic selector checks and no policy is enforced
8: by the plugin.