thomasl
f825c66731
git-svn-id: http://svn.eurecom.fr/openair4G/trunk@6880 818b1a75-f10b-46b9-bf7c-635c3b92a50f
20 lines
1.0 KiB
Plaintext
20 lines
1.0 KiB
Plaintext
# Configuration file for the peer whitelist extension.
|
|
#
|
|
# This extension is meant to allow connection from remote peers, without actively
|
|
# maintaining this connection ourselves (as it would be the case by declaring the
|
|
# peer in a ConnectPeer directive).
|
|
# The format of this file is very simple. It contains a list of peer names
|
|
# separated by spaces or newlines.
|
|
#
|
|
# The peer name must be a fqdn. We allow also a special "*" character as the
|
|
# first label of the fqdn, to allow all fqdn with the same domain name.
|
|
# Example: *.example.net will allow host1.example.net and host2.example.net
|
|
#
|
|
# At the beginning of a line, the following flags are allowed (case sensitive) -- either or both can appear:
|
|
# ALLOW_OLD_TLS : we accept unprotected CER/CEA exchange with Inband-Security-Id = TLS
|
|
# ALLOW_IPSEC : we accept implicitly protected connection with with peer (Inband-Security-Id = IPSec)
|
|
# It is specified for example as:
|
|
# ALLOW_IPSEC vpn.example.net vpn2.example.net *.vpn.example.net
|
|
|
|
ALLOW_OLD_TLS @REMOTE_PEER_WHITELIST@
|