aboutsummaryrefslogtreecommitdiffstats
path: root/conf/options
Commit message (Expand)AuthorAgeFilesLines
* The pacman tool got replaced by the sec-updater toolTobias Brunner2017-11-151-7/+0
* sec-updater: Fix typo in documentationTobias Brunner2017-11-151-1/+1
* ikev2: Enumerate RSA/PSS schemes and use them if enabledTobias Brunner2017-11-081-0/+3
* sec-updater: Import SWID tags of updated packagesAndreas Steffen2017-09-091-0/+29
* sw-collector: Moved info class to libimcvAndreas Steffen2017-08-091-3/+0
* conf: Descriptions of several settings updatedTobias Brunner2017-08-081-4/+12
* Fixed some typos, courtesy of codespellTobias Brunner2017-08-071-1/+1
* swid-gen: Share SWID generator between sw-collector, imc-swima and imc-swidAndreas Steffen2017-08-042-9/+9
* sw-collector: Added --full optionAndreas Steffen2017-08-031-0/+3
* swanctl: Read default socket from swanctl.socket optionTobias Brunner2017-07-271-1/+4
* sw-collector: sw-collector.first_file setting retrieves creation date from fi...Andreas Steffen2017-07-261-0/+3
* sw-collector: Query central collector databaseAndreas Steffen2017-07-081-0/+12
* sw-collector: Collects endpoint software eventsAndreas Steffen2017-07-081-0/+17
* child-delete: Delay the removal of the inbound SA of rekeyed CHILD_SAsTobias Brunner2017-05-231-0/+10
* ike: Use optional jitter to calculate retransmission timeoutsTobias Brunner2017-05-231-0/+7
* conf: Document recommended lower limit for SPIsTobias Brunner2017-03-231-0/+4
* conf: Remove snippet for aikpub2Tobias Brunner2017-03-231-2/+0
* kernel: Make range of SPIs for IPsec SAs configurableTobias Brunner2017-03-021-0/+6
* ike-sa: Optionally try to migrate to the best path on routing priority changesMartin Willi2017-02-171-0/+10
* vici: strongswan.conf cache_crls = yes saves fetched CRLs to diskAndreas Steffen2016-10-111-0/+6
* nm: Make global CA directory configurableTobias Brunner2016-10-041-0/+3
* ike: Set default IKE fragment size to 1280Tobias Brunner2016-10-041-4/+5
* Created libtpmtss library handling access to v1.2 and v2.0 TPMsAndreas Steffen2016-06-222-2/+2
* aikpub2: Convert TSS 2.0 AIK public key blob into PKCS#1 formatAndreas Steffen2016-06-221-0/+2
* ike: Add configuration option to switch to preferring supplied proposals over...Tobias Brunner2016-06-171-0/+5
* ikev2: Add option to disable following redirects as clientTobias Brunner2016-03-041-0/+3
* ikev1: Allow immediate deletion of rekeyed CHILD_SAsTobias Brunner2016-03-031-0/+8
* ikev1: Always enable charon.reuse_ikesaTobias Brunner2016-02-011-1/+1
* file-logger: Add option to print milliseconds within the current second after...Tobias Brunner2015-11-091-0/+4
* libtnccs: Optionally use RTLD_NOW to load IMC/IMVs with dlopen()Tobias Brunner2015-11-091-2/+2
* plugin-loader: Optionally use RTLD_NOW with dlopen()Tobias Brunner2015-11-091-0/+4
* ikev1: Make maximum number of IKEv1 phase 2 exchanges we keep state about con...Tobias Brunner2015-10-301-0/+4
* starter: Remove documentation for starter.load optionTobias Brunner2015-08-271-3/+0
* Added imc-hcd attributes to strongswan.confAndreas Steffen2015-08-181-0/+3
* conf: Clarify resolution for two time settingsTobias Brunner2015-08-101-2/+2
* imv_policy_manager: Added capability to execute an allow or block shell comma...Andreas Steffen2015-04-261-0/+13
* trap-manager: Add option to ignore traffic selectors from acquire eventsTobias Brunner2015-03-231-0/+11
* ikev2: Add an option to disable constraints against signature schemesTobias Brunner2015-03-041-0/+8
* ikev2: Add a global option to disable RFC 7427 signature authenticationTobias Brunner2015-03-041-0/+3
* mem-pool: Pass the remote IKE address, to re-acquire() an address during reauthMartin Willi2015-02-201-4/+0
* ikev2: Trigger make-before-break reauthentication instead of reauth taskMartin Willi2015-02-201-0/+10
* mem-pool: Document reassign_online optionTobias Brunner2015-02-121-0/+4
* ike: Add IKEv2 in description of fragment_size option in strongswan.confTobias Brunner2014-10-141-3/+4
* ikev1: Move fragment generation to message_tTobias Brunner2014-10-101-3/+4
* starter: Allow specifying the ipsec.conf location in strongswan.confShea Levy2014-10-021-0/+3
* systemd: Add a native systemd journal loggerMartin Willi2014-09-221-0/+13
* conf: Document charon.*-scripts optionsTobias Brunner2014-06-301-0/+8
* conf: Document swanctl optionsTobias Brunner2014-06-301-0/+2
* conf: Document aikgen optionsTobias Brunner2014-06-301-0/+2
* autoconf: Replace --disable-tools option with --disable-scepclientTobias Brunner2014-06-301-0/+0