[PATCH 07/16] IPsec: Apple: Enable PFS on client when enabled

Signed-off-by: Michael Tremer michael.tremer@ipfire.org --- html/cgi-bin/vpnmain.cgi | 7 +++++++ 1 file changed, 7 insertions(+)

diff --git a/html/cgi-bin/vpnmain.cgi b/html/cgi-bin/vpnmain.cgi index f5b1186a8..816136c92 100644 --- a/html/cgi-bin/vpnmain.cgi +++ b/html/cgi-bin/vpnmain.cgi @@ -1257,6 +1257,13 @@ END print " <key>RemoteAddress</key>\n"; print " <string>$endpoint</string>\n";

+ # PFS + my $pfs = $confighash{$key}[28]; + if ($pfs eq "on") { + print " <key>EnablePFS</key>\n"; + print " <true/>\n"; + } + # Left ID if ($confighash{$key}[9]) { print " <key>LocalIdentifier</key>\n";