mirror of
https://github.com/strongswan/strongswan.git
synced 2025-10-04 00:00:14 -04:00
This allows preventing peers from authenticating with certificates that are locally trusted, in particular, our own local certificate (which safeguards against accidental reuse of certificates on multiple peers). On the other hand, if this option is enabled, end-entity certificates for peers can't be configured anymore explicitly (e.g. via remote.certs in swanctl.conf).