diff options
| author |   grunk <grunk@openbsd.org> | 2005-11-17 21:18:25 +0000 |
|---|---|---|
| committer | grunk <grunk@openbsd.org> | 2005-11-17 21:18:25 +0000 |
| commit | a42de217c29a48419a9ee888e23a562ae72071e0 (patch) | |
| tree | 75eebdb2280abf5837413126d31bf002059d285a | |
| parent | for pfctl -f rules, open the file before resetting options. when opening (diff) | |
| download | wireguard-openbsd-a42de217c29a48419a9ee888e23a562ae72071e0.tar.xz wireguard-openbsd-a42de217c29a48419a9ee888e23a562ae72071e0.zip | |
typo, ok hshoexer@
| -rw-r--r-- | sbin/isakmpd/DESIGN-NOTES | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sbin/isakmpd/DESIGN-NOTES b/sbin/isakmpd/DESIGN-NOTES index fd10c58ee5f..2fb7f70ff76 100644 --- a/sbin/isakmpd/DESIGN-NOTES +++ b/sbin/isakmpd/DESIGN-NOTES @@ -1,4 +1,4 @@ -$OpenBSD: DESIGN-NOTES,v 1.23 2005/04/08 17:26:27 cloder Exp $ +$OpenBSD: DESIGN-NOTES,v 1.24 2005/11/17 21:18:25 grunk Exp $ $EOM: DESIGN-NOTES,v 1.48 1999/08/12 22:34:25 niklas Exp $ General coding conventions @@ -380,7 +380,7 @@ To use RSA Signature mode you are required to generate certificates. This can be done with ssleay, see man ssl. But the X509 certificates require a subjectAltname extension that can either be an IPV4 address, a User-FQDN or just FQDN. ssleay can not create those extension, -insead use the x509test program in src/regress/sbin/isakmpd/x509 to +instead use the x509test program in src/regress/sbin/isakmpd/x509 to modify an existing certificate. It will insert the subjectAltname extension and sign it with the provided private Key. The resulting certificate then needs to be stored in the directory pointed to by |