aboutsummaryrefslogtreecommitdiffstats
path: root/conf
diff options
context:
space:
mode:
authorAndreas Steffen <andreas.steffen@strongswan.org>2017-09-09 13:13:28 +0200
committerAndreas Steffen <andreas.steffen@strongswan.org>2017-09-09 20:23:19 +0200
commit8aad7ffb11beb1c39bde41a456b7c21b240667c8 (patch)
tree4bc91c9c3e6676a43bdd67bfc713519b77a8fa7e /conf
parent33a729fac2f6637d1eaacfdc6fd9e6f16259b42c (diff)
downloadstrongswan-8aad7ffb11beb1c39bde41a456b7c21b240667c8.tar.bz2
strongswan-8aad7ffb11beb1c39bde41a456b7c21b240667c8.tar.xz
sec-updater: Import SWID tags of updated packages
sec-updater downloads the deb package files from security updates from a given linux repository and uses the swid_generator command to derive a SWID tag. The SWID tag is then imported into strongTNC using the manage.py importswid command.
Diffstat (limited to 'conf')
-rw-r--r--conf/Makefile.am1
-rw-r--r--conf/options/sec-updater.opt29
2 files changed, 30 insertions, 0 deletions
diff --git a/conf/Makefile.am b/conf/Makefile.am
index 87319db22..0a4a8597f 100644
--- a/conf/Makefile.am
+++ b/conf/Makefile.am
@@ -25,6 +25,7 @@ options = \
options/starter.opt \
options/swanctl.opt \
options/tnc.opt \
+ options/sec-updater.opt \
options/sw-collector.opt
plugins = \
diff --git a/conf/options/sec-updater.opt b/conf/options/sec-updater.opt
new file mode 100644
index 000000000..1162efecc
--- /dev/null
+++ b/conf/options/sec-updater.opt
@@ -0,0 +1,29 @@
+sec-updater {}
+ Options for the sec-updater tool.
+
+ Options for the sec-updater tool.
+
+sec-updater.database =
+ Global IMV policy database URI. If it contains a password, make sure to
+ adjust the permissions of the config file accordingly.
+
+sec-updater.swid_gen.command = /usr/local/bin/swid_generator
+ SWID generator command to be executed.
+
+sec-updater.swid_gen.tag_creator.name = strongSwan Project
+ Name of the tagCreator entity.
+
+sec-updater.swid_gen.tag_creator.regid = strongswan.org
+ regid of the tagCreator entity.
+
+sec-updater.tnc_manager_command = /var/www/tnc/manager.py
+ strongTNC manage.py command used to import SWID tags.
+
+sec-updater.tmp.deb_file = /tmp/sec-updater.deb
+ Temporary storage for downloaded deb package file.
+
+sec-updater.tmp.tag_file = /tmp/sec-updater.tag
+ Temporary storage for generated SWID tags.
+
+sec-updater.load =
+ Plugins to load in sec-updater tool.