2.2.2.2.35 DisableIKENameEkuCheck

  • Article

The DisableIKENameEkuCheck key specifies whether the option for verifying that enhanced key usage (EKU) of the RRAS certificate is enabled on the RRAS entry. This key is optional.<217> If the key is present, it is used only if the Type key has the value "2". It SHOULD take one of the values in the following table.

Value

Meaning

0

The EKU of the RRAS certificate is validated to check whether it contains the Server Auth (1.3.6.1.5.5.7.3.1) [RFC2459] Object Identifier (OID).

1

The EKU of the RRAS certificate is not validated.