diff options
| author | Martin Willi <martin@revosec.ch> | 2014-02-04 11:37:52 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2014-02-06 15:58:13 +0100 |
| commit | fe7269c089ddb18d4d2778002a7f249148966f19 (patch) | |
| tree | 0c20853027ec5de36c0e3298e146310286b3e0a7 /src | |
| parent | c9e85424a8cb61580a80b716fc4c846f7f535b69 (diff) | |
| download | strongswan-fe7269c089ddb18d4d2778002a7f249148966f19.tar.bz2 strongswan-fe7269c089ddb18d4d2778002a7f249148966f19.tar.xz | |
charon-cmd: Document new proposal options in manpage
Diffstat (limited to 'src')
| -rw-r--r-- | src/charon-cmd/charon-cmd.8.in | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/src/charon-cmd/charon-cmd.8.in b/src/charon-cmd/charon-cmd.8.in index 25d706995..a2d424e9a 100644 --- a/src/charon-cmd/charon-cmd.8.in +++ b/src/charon-cmd/charon-cmd.8.in @@ -116,6 +116,24 @@ address will always be proposed. .BI "\-\-remote\-ts " subnet Traffic selector to propose for remote side, defaults to 0.0.0.0/0. .TP +.BI "\-\-ike\-proposal " proposal +IKE proposal to offer instead of default. For IKEv1, a single proposal consists +of one encryption algorithm, an integrity/PRF algorithm and a DH group. IKEv2 +can propose multiple algorithms of the same kind. To specify multiple proposals, +repeat the option. +.TP +.BI "\-\-esp\-proposal " proposal +ESP proposal to offer instead of default. For IKEv1, a single proposal consists +of one encryption algorithm, an integrity algorithm and an optional DH group for +Perfect Forward Secrecy rekeying. IKEv2 can propose multiple algorithms of the +same kind. To specify multiple proposals, repeat the option. +.TP +.BI "\-\-ah\-proposal " proposal +AH proposal to offer instead of ESP. For IKEv1, a single proposal consists +of an integrity algorithm and an optional DH group for Perfect Forward Secrecy +rekeying. IKEv2 can propose multiple algorithms of the same kind. To specify +multiple proposals, repeat the option. +.TP .BI "\-\-profile " name Authentication profile to use, the list of supported profiles can be found in the |