aboutsummaryrefslogtreecommitdiffstats
path: root/conf/plugins
Commit message (Collapse)AuthorAgeFilesLines
* conf: Extend description of charon.plugins.kernel-netlink.xfrm_acq_expiresTobias Brunner2016-08-291-5/+9
|
* libtpmtss: Implemented TSS2 quote() methodAndreas Steffen2016-06-261-0/+3
|
* libimcv: migrate pts to tpm_tssAndreas Steffen2016-06-221-0/+3
|
* p-cscf: Make sending requests configurable and disable it by defaultTobias Brunner2016-03-101-0/+11
|
* eap-radius: Add ability to configure RADIUS retransmission behaviorThom Troy2015-11-171-1/+12
| | | | Closes strongswan/strongswan#19.
* conf: Add documentation for new osx-attr optionTobias Brunner2015-08-281-0/+3
|
* conf: Fix declaration of default values for imc-hcd optionsTobias Brunner2015-08-271-5/+5
|
* stroke: Add an option to disable side-swapping of configuration optionsTobias Brunner2015-08-211-0/+5
| | | | | In some scenarios it might be preferred to ensure left is always local and no unintended swaps occur.
* Added imc-hcd attributes to strongswan.confAndreas Steffen2015-08-181-0/+71
|
* conf: Clarify resolution for two time settingsTobias Brunner2015-08-101-2/+2
| | | | Fixes #1061.
* eap-radius: Change trigger for Accounting Start messages for IKEv1Tobias Brunner2015-08-061-1/+1
| | | | | | | | | | | | | | | | | | | | | Some clients won't do Mode Config or XAuth during reauthentication. Because Start messages previously were triggered by TRANSACTION exchanges none were sent for new SAs of such clients, while Stop messages were still sent for the old SAs when they were destroyed. This resulted in an incorrect state on the RADIUS server. Since 31be582399 the assign_vips() event is also triggered during reauthentication if the client does not do a Mode Config exchange. So instead of waiting for a TRANSACTION exchange we trigger the Start message when a virtual IP is assigned to a client. With this the charon.plugins.eap-radius.accounting_requires_vip option would not have any effect for IKEv1 anymore. However, it previously also only worked if the client did an XAuth exchange, which is probably rarely used without virtual IPs, so this might not be much of a regression. Fixes #937.
* kernel-netlink: Use PAGE_SIZE as default size for the netlink receive bufferTobias Brunner2015-08-041-1/+1
| | | | | | | | The kernel uses NLMSG_GOODSIZE as default buffer size, which defaults to the PAGE_SIZE if it is lower than 8192 or to that value otherwise. In some cases (e.g. for dump messages) the kernel might use up to 16k for messages, which might require increasing this value.
* kernel-netlink: Make buffer size for received Netlink messages configurableTobias Brunner2015-05-211-0/+3
|
* Added PB-TNC test options to strongswan.conf man pageAndreas Steffen2015-03-271-0/+6
|
* Fixed strongswan.conf man page entry of imc-attestationAndreas Steffen2015-03-272-18/+18
|
* Optionally announce PB-TNC mutual protocol capabilityAndreas Steffen2015-03-231-0/+3
|
* kernel-pfkey: Add option to set receive buffer size of event socketTobias Brunner2015-03-061-0/+7
| | | | | | | | If many requests are sent to the kernel the events generated by these requests may fill the receive buffer before the daemon is able to read these messages. Fixes #783.
* Implemented improved BLISS-B signature algorithmAndreas Steffen2015-02-251-0/+2
|
* forecast: Document strongswan.conf optionsMartin Willi2015-02-201-0/+29
|
* kernel-netlink: Add missing documentation for two optionsTobias Brunner2014-12-191-0/+6
|
* kernel-netlink: Alternatively support global port based IKE bypass policiesMartin Willi2014-11-211-0/+9
| | | | | | The socket based IKE bypass policies are usually superior, but not supported on all networking stacks. The port based variant uses global policies for the UDP ports we have IKE sockets for.
* conf: Document kernel-netlink retransmission and parallelization optionsMartin Willi2014-11-211-0/+17
|
* eap-radius: Add option to set interval for interim accounting updatesTobias Brunner2014-10-101-1/+5
| | | | | | Any interval returned by the RADIUS server in the Access-Accept message overrides the configured interval. But it might be useful if RADIUS is only used for accounting.
* ext-auth: Add an ext-auth plugin invoking an external authorization scriptMartin Willi2014-10-061-0/+15
| | | | Original patch courtesy of Vyronas Tsingaras.
* stroke: Allow specifying the ipsec.secrets location in strongswan.confShea Levy2014-10-021-0/+3
|
* kernel-netlink: Optionally install protocol and ports on transport mode SAsTobias Brunner2014-09-121-0/+9
|
* kernel-netlink: Add global option to configure MSS-clamping on installed routesTobias Brunner2014-09-121-0/+3
|
* kernel-netlink: Add global option to set MTU on installed routesTobias Brunner2014-09-121-0/+3
|
* conf: Document load-tester.crl optionTobias Brunner2014-06-301-0/+4
|
* Remove kernel-klips pluginTobias Brunner2014-06-191-5/+0
|
* Fixed typo in strongswan.confAndreas Steffen2014-06-051-1/+1
|
* Updated IMC/IMV entries in strongswan.conf man pageAndreas Steffen2014-05-3110-35/+40
|
* Implemented PT-EAP protocol (RFC 7171)Andreas Steffen2014-05-122-1/+4
|
* Changed default value to libimcv.imc-attestation.pcr_info = noAndreas Steffen2014-05-101-1/+1
|
* vici: Document strongswan.conf optionsMartin Willi2014-05-071-0/+2
|
* Use python-based swidGenerator to generated SWID tagsAndreas Steffen2014-04-151-0/+9
|
* Renamed the AIK public key parameter to imc-attestation.aik_pubkeyAndreas Steffen2014-04-151-1/+1
|
* Implemented configurable Device ID in OS IMCAndreas Steffen2014-04-151-0/+12
|
* eap-radius: Add option to not close IKE_SAs on timeouts during interim ↵Tobias Brunner2014-03-311-0/+4
| | | | | | accouting updates Fixes #528.
* Disable mandatory ECP support for attestionAndreas Steffen2014-03-072-1/+7
|
* conf: Install config files world-readable but warn about permissions for ↵Tobias Brunner2014-02-125-6/+12
| | | | certain options
* conf: Document options of plugins in libptsTobias Brunner2014-02-123-0/+48
|
* conf: Document libimcv optionsTobias Brunner2014-02-126-0/+24
|
* conf: Document libtnccs optionsTobias Brunner2014-02-124-0/+17
|
* conf: Move load-tester options to plugin specific fileTobias Brunner2014-02-121-1/+125
|
* conf: Options of all plugins documentedTobias Brunner2014-02-1248-30/+527
| | | | Some options are still missing descriptions though.
* conf: Generate and install config sippets for option descriptionsTobias Brunner2014-02-121-0/+30
The strongswan.d directory is also created relative to the configured location of strongswan.conf.
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-11 06:36:02 +0000