From 8ff7026b0e96234ea364a51f0174ecf49cf8bed3 Mon Sep 17 00:00:00 2001
From: Matthias Schiffer <mschiffer@universe-factory.net>
Date: Wed, 16 Oct 2013 20:37:16 +0200
Subject: Add `secure handshakes' option (without effect for now)

Not setting the option produces a warning (so not having it set is deprecated
now), so we can change the default from no to yes in a few release cycles.
---
 src/config.y | 10 ++++++++++
 1 file changed, 10 insertions(+)

(limited to 'src/config.y')

diff --git a/src/config.y b/src/config.y
index 95ceaa2..bb9884e 100644
--- a/src/config.y
+++ b/src/config.y
@@ -117,6 +117,8 @@
 %token TOK_MAC
 %token TOK_ADDRESSES
 %token TOK_AUTO
+%token TOK_SECURE
+%token TOK_HANDSHAKES
 
 %token <addr4> TOK_ADDR4
 %token <addr6> TOK_ADDR6
@@ -167,6 +169,7 @@ statement:	peer_group_statement
 	|	TOK_USER user ';'
 	|	TOK_GROUP group ';'
 	|	TOK_DROP TOK_CAPABILITIES drop_capabilities ';'
+	|	TOK_SECURE TOK_HANDSHAKES secure_handshakes ';'
 	|	TOK_LOG log ';'
 	|	TOK_HIDE hide ';'
 	|	TOK_INTERFACE interface ';'
@@ -218,6 +221,13 @@ drop_capabilities_enabled:
 			$$ = $1 ? DROP_CAPS_ON : DROP_CAPS_OFF;
 		}
 
+secure_handshakes:
+		boolean {
+			conf->secure_handshakes_set = true;
+			conf->secure_handshakes = $1;
+		}
+	;
+
 log:		TOK_LEVEL log_level {
 			conf->log_stderr_level = $2;
 		}
-- 
cgit v1.2.3