diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2012-05-15 16:31:46 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2012-06-11 17:33:31 +0200 |
| commit | 5b09310e67a0bb1d9f1aaf07fdc80b297aef4791 (patch) | |
| tree | 1d364a62739ca351c24dde8aad083f15c62cdc45 /src/starter/confread.h | |
| parent | 29906e0eabdcc3302b345c7f2e5c0c950f9c617e (diff) | |
| download | strongswan-5b09310e67a0bb1d9f1aaf07fdc80b297aef4791.tar.bz2 strongswan-5b09310e67a0bb1d9f1aaf07fdc80b297aef4791.tar.xz | |
starter: Use custom type for SA specific options (flags).
Diffstat (limited to 'src/starter/confread.h')
| -rw-r--r-- | src/starter/confread.h | 16 |
1 files changed, 15 insertions, 1 deletions
diff --git a/src/starter/confread.h b/src/starter/confread.h index 2d8534ea9..5064f6cd8 100644 --- a/src/starter/confread.h +++ b/src/starter/confread.h @@ -55,6 +55,20 @@ typedef enum { STRICT_IFURI } strict_t; +typedef enum { + /* IPsec options */ + SA_OPTION_AUTHENTICATE = 1 << 0, /* use AH instead of ESP? */ + SA_OPTION_COMPRESS = 1 << 1, /* use IPComp */ + + /* IKE and other other options */ + SA_OPTION_DONT_REKEY = 1 << 2, /* don't rekey state either Phase */ + SA_OPTION_DONT_REAUTH = 1 << 3, /* don't reauthenticate on rekeying, IKEv2 only */ + SA_OPTION_MODECFG_PUSH = 1 << 4, /* is modecfg pushed by server? */ + SA_OPTION_XAUTH_SERVER = 1 << 5, /* are we an XAUTH server? */ + SA_OPTION_MOBIKE = 1 << 6, /* enable MOBIKE for IKEv2 */ + SA_OPTION_FORCE_ENCAP = 1 << 7, /* force UDP encapsulation */ +} sa_option_t; + typedef struct starter_end starter_end_t; struct starter_end { @@ -112,7 +126,7 @@ struct starter_conn { char *authby; ipsec_mode_t mode; bool proxy_mode; - lset_t policy; + sa_option_t options; time_t sa_ike_life_seconds; time_t sa_ipsec_life_seconds; time_t sa_rekey_margin; |