aboutsummaryrefslogtreecommitdiffstats
path: root/man/strongswan.conf.5.in
Commit message (Collapse)AuthorAgeFilesLines
* Selectively enable PT-TLS and/or RADIUS sockets in tnc-pdp pluginAndreas Steffen2013-08-261-0/+6
|
* moved tnc_imv plugin to libtnccs thanks to recommendation callback functionAndreas Steffen2013-08-151-8/+8
|
* Documented plugin move from libcharon to libtnccs in strongswan.confAndreas Steffen2013-08-151-15/+17
|
* Add PT-TLS interface to strongSwan PDPAndreas Steffen2013-08-151-3/+6
|
* strongswan.conf: Add note about reserved threadsTobias Brunner2013-08-071-1/+5
|
* strongswan.conf: Moved some stuff aroundTobias Brunner2013-07-231-23/+24
|
* strongswan.conf: Add missing optionsTobias Brunner2013-07-221-10/+47
|
* kernel-pfroute: Make time that is waited for VIPs to appear configurableTobias Brunner2013-07-171-0/+3
| | | | | One second might be too short for IPs to appear/disappear, especially on virtualized hosts.
* socket-default: Add options to disable address familiesTobias Brunner2013-07-051-0/+6
|
* capabilities: Make the user and group charon(-nm) changes to configurableTobias Brunner2013-06-251-0/+6
|
* Removed obsoleted strongswan.conf optionsAndreas Steffen2013-06-211-15/+0
|
* charon-cmd: Link strongswan.conf(5) and charon-cmd(8) man pagesTobias Brunner2013-06-211-2/+9
|
* kernel-netlink: Add an option to disable roam eventsTobias Brunner2013-05-031-0/+3
|
* added libstrongswan.plugins.openssl.fips_mode to man pageAndreas Steffen2013-04-161-0/+3
|
* Added charon.initiator_only option which causes charon to ignore IKE ↵Andreas Steffen2013-04-141-0/+3
| | | | initiation requests by peers
* implemented periodic IF-MAP RenewSession requestAndreas Steffen2013-04-031-1/+4
|
* Updated strongswan.conf(5) man pageTobias Brunner2013-04-011-10/+42
|
* updated strongswan.conf man page for tn_ifmap pluginAndreas Steffen2013-03-311-12/+12
|
* Moved configuration from resolver manager to unbound pluginAndreas Steffen2013-02-191-0/+6
| | | | Also streamlined log messages in unbound plugin.
* ipseckey: Added "enable" option for the IPSECKEY plugin to strongswan.confReto Guadagnini2013-02-191-0/+3
|
* Typo in strongswan.conf(5) man page fixedTobias Brunner2013-01-311-1/+1
|
* Documented new options in strongswan.conf(5) man pageTobias Brunner2013-01-251-3/+60
|
* Added an option to configure the maximum size of a fragmentTobias Brunner2013-01-121-0/+4
|
* Use a connection specific option to en-/disable IKEv1 fragmentationTobias Brunner2012-12-241-5/+0
|
* Add an option to en-/disable IKE fragmentationTobias Brunner2012-12-241-0/+5
| | | | | Fragments are always accepted but will not be sent if disabled. The vendor ID is only sent if the option is enabled.
* add dlcose strongswan.conf option to tnc-imc/tnc-imv pluginsAndreas Steffen2012-12-091-0/+6
|
* updated strongswan.conf man pageAndreas Steffen2012-11-121-2/+14
|
* scanner imc/imv pair uses IETF VPN PA-TNC message subtypeAndreas Steffen2012-10-311-0/+6
|
* Added an option to reload certificates from PKCS#11 tokens on SIGHUPTobias Brunner2012-10-181-0/+3
|
* Terminate unused resolver threads after a timeoutTobias Brunner2012-10-181-0/+6
|
* implemented os_info_t classAndreas Steffen2012-10-101-6/+6
|
* Added description for flush_auth_cfg and acct_port plus some minor editorial ↵Tobias Brunner2012-09-251-6/+16
| | | | changes
* Documentation about some time values clarifiedTobias Brunner2012-09-241-2/+2
|
* Added an option to configure the interface on which virtual IP addresses are ↵Tobias Brunner2012-09-211-0/+4
| | | | installed
* Added options and a lookup function that will allow filtering of network ↵Tobias Brunner2012-09-211-1/+9
| | | | interfaces
* Option added to enforce a configured destination address for DHCP packetsTobias Brunner2012-09-131-0/+8
|
* Updates to strongswan.conf(5) man page (added several missing options)Tobias Brunner2012-09-121-39/+82
|
* Add random plugin options to strongswan.conf.5Martin Willi2012-09-101-0/+6
|
* added libimcv.assessment_result to strongswan.conf man pageAndreas Steffen2012-09-091-0/+3
|
* Documentation for eap-dynamic addedTobias Brunner2012-08-311-0/+10
|
* Merge branch 'android-ndk'Tobias Brunner2012-08-131-1/+16
|\ | | | | | | | | | | | | | | | | | | | | | | This branch comes with some preliminary changes for the user-land IPsec implementation and the Android App. One important change is that the UDP ports used by the socket-default plugin were made configurable (either via ./configure or strongswan.conf). Also, the plugin does randomly allocate a port if it is configured to 0, which is useful for client implementations. A consequence of these changes is that the local UDP port used when creating ike_cfg_t objects has to be fetched from the socket.
| * Added option to prevent socket-default from setting the source address on ↵Tobias Brunner2012-08-081-0/+3
| | | | | | | | outbound packets
| * socket-default plugin allocates random ports if configured to 0.Tobias Brunner2012-08-081-0/+9
| | | | | | | | Also added strongswan.conf options to change the ports.
| * Added ESP log group for libipsec log messages.Tobias Brunner2012-08-081-0/+3
| |
| * Moved Android specific logger to separate plugin.Tobias Brunner2012-08-081-1/+1
| | | | | | | | | | | | This is mainly because the other parts of the existing android plugin can not be built in the NDK (access to keystore and system properties are not part of the stable NDK libraries).
* | Documentation fixes regarding xauth-pam/eap-gtc pluginsTobias Brunner2012-08-111-3/+5
| |
* | make max_message_size parameter consistent with similar optionsAndreas Steffen2012-08-091-2/+2
|/
* added PA-TNC max_msg_len option to man pageAndreas Steffen2012-07-131-0/+6
|
* make maximum PB-TNC batch size configurableAndreas Steffen2012-07-111-0/+3
|
* added charon.plugins.eap-tnc.protocol optionAndreas Steffen2012-07-111-0/+3
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-22 03:21:33 +0000