aboutsummaryrefslogtreecommitdiffstats
path: root/conf/options/charon.opt
Commit message (Expand)AuthorAgeFilesLines
* ikev2: Enumerate RSA/PSS schemes and use them if enabledTobias Brunner2017-11-081-0/+3
* Fixed some typos, courtesy of codespellTobias Brunner2017-08-071-1/+1
* child-delete: Delay the removal of the inbound SA of rekeyed CHILD_SAsTobias Brunner2017-05-231-0/+10
* ike: Use optional jitter to calculate retransmission timeoutsTobias Brunner2017-05-231-0/+7
* conf: Document recommended lower limit for SPIsTobias Brunner2017-03-231-0/+4
* kernel: Make range of SPIs for IPsec SAs configurableTobias Brunner2017-03-021-0/+6
* ike-sa: Optionally try to migrate to the best path on routing priority changesMartin Willi2017-02-171-0/+10
* vici: strongswan.conf cache_crls = yes saves fetched CRLs to diskAndreas Steffen2016-10-111-0/+6
* ike: Set default IKE fragment size to 1280Tobias Brunner2016-10-041-4/+5
* ike: Add configuration option to switch to preferring supplied proposals over...Tobias Brunner2016-06-171-0/+5
* ikev2: Add option to disable following redirects as clientTobias Brunner2016-03-041-0/+3
* ikev1: Allow immediate deletion of rekeyed CHILD_SAsTobias Brunner2016-03-031-0/+8
* ikev1: Always enable charon.reuse_ikesaTobias Brunner2016-02-011-1/+1
* libtnccs: Optionally use RTLD_NOW to load IMC/IMVs with dlopen()Tobias Brunner2015-11-091-2/+2
* plugin-loader: Optionally use RTLD_NOW with dlopen()Tobias Brunner2015-11-091-0/+4
* ikev1: Make maximum number of IKEv1 phase 2 exchanges we keep state about con...Tobias Brunner2015-10-301-0/+4
* conf: Clarify resolution for two time settingsTobias Brunner2015-08-101-2/+2
* trap-manager: Add option to ignore traffic selectors from acquire eventsTobias Brunner2015-03-231-0/+11
* ikev2: Add an option to disable constraints against signature schemesTobias Brunner2015-03-041-0/+8
* ikev2: Add a global option to disable RFC 7427 signature authenticationTobias Brunner2015-03-041-0/+3
* mem-pool: Pass the remote IKE address, to re-acquire() an address during reauthMartin Willi2015-02-201-4/+0
* ikev2: Trigger make-before-break reauthentication instead of reauth taskMartin Willi2015-02-201-0/+10
* mem-pool: Document reassign_online optionTobias Brunner2015-02-121-0/+4
* ike: Add IKEv2 in description of fragment_size option in strongswan.confTobias Brunner2014-10-141-3/+4
* ikev1: Move fragment generation to message_tTobias Brunner2014-10-101-3/+4
* conf: Document charon.*-scripts optionsTobias Brunner2014-06-301-0/+8
* kernel-netlink: Follow RFC 6724 when selecting IPv6 source addressesTobias Brunner2014-06-191-0/+4
* ikev1: Add an option to accept unencrypted ID/HASH payloadsMartin Willi2014-04-171-0/+15
* conf: Add logger example configTobias Brunner2014-02-121-7/+0
* conf: Converted charon optionsTobias Brunner2014-02-121-1/+290
* conf: Generate and install config sippets for option descriptionsTobias Brunner2014-02-121-0/+2