优化证书认证逻辑,增加回退用户认证功能,可选仅证书认证

This commit is contained in:
wsczx
2025-08-22 12:48:41 +08:00
parent 02a49b30a7
commit a44f2d6161
6 changed files with 24 additions and 14 deletions

View File

@@ -13,6 +13,8 @@
<WindowsVPNEstablishment>AllowRemoteUsers</WindowsVPNEstablishment>
<LinuxVPNEstablishment>AllowRemoteUsers</LinuxVPNEstablishment>
<CertEnrollmentPin>pinAllowed</CertEnrollmentPin>
<CertificateStore>User</CertificateStore>
<AutomaticCertSelection UserControllable="true">true</AutomaticCertSelection>
<CertificateMatch>
<KeyUsage>
<MatchKey>Digital_Signature</MatchKey>
@@ -20,7 +22,6 @@
<ExtendedKeyUsage>
<ExtendedMatchKey>ClientAuth</ExtendedMatchKey>
</ExtendedKeyUsage>
<CertificateStore>User</CertificateStore>
</CertificateMatch>
</ClientInitialization>