<?xml version="1.0" encoding="utf-8"?>
<!--
    Copyright (C) 2016-2017 Yick Xie

    This program is free software; you can redistribute it and/or modify it
    under the terms of the GNU General Public License as published by the
    Free Software Foundation; either version 2 of the License, or (at your
    option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.

    This program is distributed in the hope that it will be useful, but
    WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
    or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
    for more details.
-->
<resources>

    <!-- Application -->
    <string name="app_name">strongSwan VPN 客户端</string>
    <string name="main_activity_name">strongSwan</string>
    <string name="show_log">浏览日志</string>
    <string name="search">搜索</string>
    <string name="vpn_not_supported_title">无法支持VPN</string>
    <string name="vpn_not_supported">您的设备无法支持VPN应用。\n请联系供应商。</string>
    <string name="vpn_not_supported_during_lockdown">VPN connections are not supported if a built-in VPN has the always-on feature enabled.</string>
    <string name="vpn_not_supported_no_permission">Unable to get permission to create VPN connections. Either because it was denied by the user, or because a different VPN app has the always-on feature enabled.</string>
    <string name="loading">载入中&#8230;</string>
    <string name="profile_not_found">未找到配置</string>
    <string name="strongswan_shortcut">strongSwan快捷方式</string>
    <string name="permanent_notification_name">VPN connection state</string>
    <string name="permanent_notification_description">Provides information about the VPN connection state and serves as permanent notification to keep the VPN service running in the background.</string>

    <!-- Settings -->
    <string name="pref_title">Settings</string>
    <string name="pref_default_vpn_profile">Default VPN profile</string>
    <string name="pref_default_vpn_profile_mru">Connect to most recently used profile</string>
    <string name="pref_power_whitelist_title">Ignore battery optimizations</string>
    <string name="pref_power_whitelist_summary">Don\'t show a warning if the app is not on the device\'s power whitelist</string>

    <!-- Log view -->
    <string name="log_title">日志</string>
    <string name="send_log">发送日志文件</string>
    <string name="empty_log">日志文件为空</string>
    <string name="log_mail_subject">strongSwan %1$s 日志文件</string>

    <!-- VPN profile list -->
    <string name="no_profiles">无配置.</string>
    <string name="add_profile">添加VPN配置</string>
    <string name="edit_profile">编辑</string>
    <string name="copy_profile">Copy</string>
    <string name="copied_name">%1$s (Copy)</string>
    <string name="delete_profile">删除</string>
    <string name="select_profiles">选择配置</string>
    <string name="profiles_deleted">所选配置已删除</string>
    <string name="no_profile_selected">未选择配置</string>
    <string name="one_profile_selected">已选择1项配置</string>
    <string name="x_profiles_selected">已选择%1$d项配置</string>

    <!-- VPN profile details -->
    <string name="profile_edit_save">保存</string>
    <string name="profile_edit_import">导入</string>
    <string name="profile_edit_cancel">取消</string>
    <string name="profile_name_label">配置名称 (可选)</string>
    <string name="profile_name_label_simple">配置名称</string>
    <string name="profile_name_hint">默认为已配置服务器地址</string>
    <string name="profile_name_hint_gateway">默认为 \"%1$s\"</string>
    <string name="profile_gateway_label">服务器地址</string>
    <string name="profile_gateway_hint">IP地址或服务器域名</string>
    <string name="profile_vpn_type_label">VPN类型</string>
    <string name="profile_username_label">用户名</string>
    <string name="profile_password_label">密码 (可选)</string>
    <string name="profile_password_hint">留空则在要求时弹出</string>
    <string name="profile_user_certificate_label">用户证书</string>
    <string name="profile_user_select_certificate_label">选择用户证书</string>
    <string name="profile_user_select_certificate">选择指定的用户证书</string>
    <string name="profile_ca_label">CA证书</string>
    <string name="profile_ca_auto_label">自动选择</string>
    <string name="profile_ca_select_certificate_label">选择CA证书</string>
    <string name="profile_ca_select_certificate">选择一个指定的CA证书</string>
    <string name="profile_advanced_label">高级设置</string>
    <string name="profile_show_advanced_label">显示高级设置</string>
    <string name="profile_remote_id_label">服务器ID</string>
    <string name="profile_remote_id_hint">默认为已配置的服务器地址。自义定值将在鉴权期间被显式地发送至服务器</string>
    <string name="profile_remote_id_hint_gateway">默认为 \"%1$s\"。自义定值将在鉴权期间被显式地发送至服务器</string>
    <string name="profile_local_id_label">Client identity</string>
    <string name="profile_local_id_hint_user">Defaults to the configured username. Custom values may be used if expected/required by the server</string>
    <string name="profile_local_id_hint_cert">Defaults to the certificate\'s subject identity. Custom values may be used if expected/required by the server. Note that these usually must be confirmed by the certificate (auto-completion is provided for the certificate\'s alternative identities, if any)</string>
    <string name="profile_dns_servers_label">DNS servers</string>
    <string name="profile_dns_servers_hint">Custom DNS servers to use when connected to the VPN (separated by spaces, e.g. \"8.8.8.8 2001:4860:4860::8888\"), defaults to those received from the VPN server</string>
    <string name="profile_mtu_label">VPN隧道设备的MTU值</string>
    <string name="profile_mtu_hint">假如在某一网络下默认值不合适</string>
    <string name="profile_port_label">服务器端口</string>
    <string name="profile_port_hint">如不同于默认值，则所需连接的UDP端口</string>
    <string name="profile_nat_keepalive_label">NAT-T keepalive interval</string>
    <string name="profile_nat_keepalive_hint">Small packets are sent to keep mappings on NAT routers alive if there is no other traffic. In order to save energy the default interval is 45 seconds. Behind NAT routers that remove mappings early this might be too high, try 20 seconds or less in that case.</string>
    <string name="profile_cert_req_label">Send certificate requests</string>
    <string name="profile_cert_req_hint">Certificate requests are sent for all available or selected CA certificates. To reduce the size of the IKE_AUTH message this can be disabled. However, this only works if the server sends its certificate even if it didn\'t receive any certificate requests.</string>
    <string name="profile_use_ocsp_label">Use OCSP to check certificate</string>
    <string name="profile_use_ocsp_hint">Use the Online Certificate Status Protocol (OCSP), if available, to check that the server certificate has not been revoked.</string>
    <string name="profile_use_crl_label">Use CRLs to check certificate</string>
    <string name="profile_use_crl_hint">Use Certificate Revocation Lists (CRL), if available, to check that the server certificate has not been revoked. CRLs are only used if OCSP doesn\'t yield a result.</string>
    <string name="profile_strict_revocation_label">Use strict revocation checking</string>
    <string name="profile_strict_revocation_hint">In strict mode the authentication will fail not only if the server certificate has been revoked but also if its status is unknown (e.g. because OCSP failed and no valid CRL was available).</string>
    <string name="profile_rsa_pss_label">Use RSA/PSS signatures</string>
    <string name="profile_rsa_pss_hint">Use the stronger PSS encoding instead of the classic PKCS#1 encoding for RSA signatures. Authentication will fail if the server does not support such signatures.</string>
    <string name="profile_ipv6_transport_label">Use IPv6 transport addresses</string>
    <string name="profile_ipv6_transport_hint">Use IPv6 for outer transport addresses if available. Can only be enabled if UDP encapsulation for IPv6 is supported by the server. Note that the Linux kernel only supports this since version 5.8, so many servers will not support it yet.</string>
    <string name="profile_split_tunneling_label">拆分隧道</string>
    <string name="profile_split_tunneling_intro">By default, the client will route all network traffic through the VPN, unless the server narrows the subnets when the connection is established, in which case only traffic the server allows will be routed via VPN (by default, all other traffic is routed as if there was no VPN).</string>
    <string name="profile_split_tunnelingv4_title">屏蔽不通过VPN的IPV4流量</string>
    <string name="profile_split_tunnelingv6_title">屏蔽不通过VPN的IPV6流量</string>
    <string name="profile_included_subnets_label">Custom subnets</string>
    <string name="profile_included_subnets_hint">Only route traffic to specific subnets via VPN, everything else is routed as if there was no VPN (separated by spaces, e.g. \"192.168.1.0/24 2001:db8::/64\")</string>
    <string name="profile_excluded_subnets_label">Excluded subnets</string>
    <string name="profile_excluded_subnets_hint">Traffic to these subnets will not be routed via VPN, but as if there was no VPN (separated by spaces, e.g. \"192.168.1.0/24 2001:db8::/64\")</string>
    <string name="profile_select_apps_label">Applications</string>
    <string name="profile_select_apps">Select applications</string>
    <string name="profile_select_no_apps">No applications selected</string>
    <string name="profile_select_one_app">One application selected</string>
    <string name="profile_select_x_apps">%1$d applications selected</string>
    <string name="profile_proposals_label">Algorithms</string>
    <string name="profile_proposals_intro">Optionally configure specific algorithms to use for IKEv2 and/or IPsec/ESP instead of the defaults. Refer to our wiki for a <a href="https://wiki.strongswan.org/projects/strongswan/wiki/IKEv2CipherSuites">list of algorithm identifiers</a> (note that not all are supported by this app). Both fields take a list of algorithms, each separated by a hyphen.</string>
    <string name="profile_proposals_ike_label">IKEv2 Algorithms</string>
    <string name="profile_proposals_ike_hint">For non-AEAD/classic encryption algorithms, an integrity algorithm, a pseudo random function (optional, defaults to one based on the integrity algorithm) and a Diffie-Hellman group are required (e.g. aes256-sha256-ecp256). For combined-mode/AEAD algorithms, the integrity algorithm is omitted but a PRF is required (e.g. aes256gcm16-prfsha256-ecp256).</string>
    <string name="profile_proposals_esp_label">IPsec/ESP Algorithms</string>
    <string name="profile_proposals_esp_hint">For non-AEAD/classic encryption algorithms, an integrity algorithm is required, a Diffie-Hellman group is optional (e.g. aes256-sha256 or aes256-sha256-ecp256). For combined-mode/AEAD algorithms, the integrity algorithm is omitted (e.g. aes256gcm16 or aes256gcm16-ecp256). If a DH group is specified IPsec SA rekeying will use a DH key exchange. However, DH groups specified here are not used when the connection is established initially because the keys there are derived from the IKE SA key material. Therefore, any configuration mismatch with the server will only cause errors later during rekeying.</string>
    <string name="profile_import">导入VPN配置</string>
    <string name="profile_import_failed">导入VPN配置失败</string>
    <string name="profile_import_failed_detail">导入VPN配置失败: %1$s</string>
    <string name="profile_import_failed_not_found">文件未找到</string>
    <string name="profile_import_failed_host">未知主机</string>
    <string name="profile_import_failed_tls">TLS握手失败</string>
    <string name="profile_import_failed_value">Invalid value in \"%1$s\"</string>
    <string name="profile_import_exists">此VPN配置已经存在，当前设定将被覆盖。</string>
    <string name="profile_cert_import">从VPN配置导入证书</string>
    <string name="profile_cert_alias">\"%1$s\" 所对应的证书</string>
    <string name="profile_profile_id">Profile ID</string>
    <!-- Warnings/Notifications in the details view -->
    <string name="alert_text_no_input_gateway">必填信息以初始化连接</string>
    <string name="alert_text_no_input_username">请输入您的用户名</string>
    <string name="alert_text_nocertfound_title">未选择CA证书</string>
    <string name="alert_text_nocertfound">请选择一项或激活 <i>自动选择</i></string>
    <string name="alert_text_out_of_range">请输入一个数字范围从%1$d到%2$d</string>
    <string name="alert_text_no_subnets">Please enter valid subnets and/or IP addresses, separated by spaces</string>
    <string name="alert_text_no_ips">Please enter valid IP addresses, separated by spaces</string>
    <string name="alert_text_no_proposal">Please enter a valid list of algorithms, separated by hyphens</string>
    <string name="tnc_notice_title">EAP-TNC可能会影响您的隐私</string>
    <string name="tnc_notice_subtitle">设备数据已被发送至服务器管理员</string>
    <string name="tnc_notice_details"><![CDATA[<p>Trusted Network Connect (TNC) 允许服务器管理员评定一个用户设备的状况。</p><p>出于此目的，服务器管理员可能要求以下数据如独立ID、已安装软件列表、系统设置、或加密过的文件校验值。</p><b>任何数据都仅将在验证过服务器的身份ID之后被发出。</b>]]></string>

    <!-- Trusted certificate selection -->
    <string name="trusted_certs_title">CA证书</string>
    <string name="no_certificates">无证书</string>
    <string name="reload_trusted_certs">重载CA证书</string>
    <string name="system_tab">系统</string>
    <string name="user_tab">用户</string>
    <string name="local_tab">已导入</string>
    <string name="delete_certificate_question">是否删除证书？</string>
    <string name="delete_certificate">证书将被永久移除！</string>
    <string name="import_certificate">导入证书</string>
    <string name="cert_imported_successfully">证书已成功被导入</string>
    <string name="cert_import_failed">证书导入失败</string>
    <string name="crl_cache">CRL cache</string>
    <string name="clear_crl_cache_title">Clear CRL cache?</string>
    <string name="clear_crl_cache_msg_none">The CRL cache is empty</string>
    <plurals name="clear_crl_cache_msg">
        <item quantity="one">The CRL cache contains %1$d file (%2$s).</item>
        <item quantity="other">The CRL cache contains %1$d files (%2$s).</item>
    </plurals>
    <string name="clear">Clear</string>

    <!-- VPN state fragment -->
    <string name="state_label">状态：</string>
    <string name="profile_label">配置：</string>
    <string name="disconnect">断开链接</string>
    <string name="state_connecting">连接中&#8230;</string>
    <string name="state_connected">已连接</string>
    <string name="state_disconnecting">断开连接中&#8230;</string>
    <string name="state_disabled">无活跃VPN</string>
    <string name="state_error">错误</string>
    <string name="dismiss">Dismiss</string>

    <!-- IMC state fragment -->
    <string name="imc_state_label">评估详情：</string>
    <string name="imc_state_isolate">受限的</string>
    <string name="imc_state_block">失败的</string>
    <string name="show_remediation_instructions">浏览修复指引</string>

    <!-- Remediation instructions -->
    <string name="remediation_instructions_title">修复指引</string>

    <!-- Dialogs -->
    <string name="login_title">输入密码用于连接</string>
    <string name="login_username">用户名</string>
    <string name="login_password">密码</string>
    <string name="login_confirm">连接</string>
    <string name="error_format">无法建立VPN：%1$s。</string>
    <string name="error_lookup_failed">服务器地址查找失败</string>
    <string name="error_unreachable">服务器地址无法连接</string>
    <string name="error_peer_auth_failed">核验服务器鉴权失败</string>
    <string name="error_auth_failed">用户鉴权失败</string>
    <string name="error_assessment_failed">可靠性评估失败</string>
    <string name="error_generic">连接中遭遇未知失败</string>
    <string name="error_password_missing">Password unavailable</string>
    <string name="error_certificate_unavailable">Client certificate unavailable</string>
    <string name="vpn_connected">VPN已连接</string>
    <string name="vpn_profile_connected">此VPN配置目前已连接。</string>
    <string name="reconnect">重连</string>
    <string name="connect_profile_question">是否连接%1$s？</string>
    <string name="replaces_active_connection">这将覆盖您当前活跃的VPN连接！</string>
    <string name="disconnect_question">Disconnect VPN?</string>
    <string name="disconnect_active_connection">This will disconnect the active VPN connection!</string>
    <string name="connect">连接</string>
    <string name="retry">Retry</string>
    <plurals name="retry_in">
        <item quantity="one">Retry in %1$d second</item>
        <item quantity="other">Retry in %1$d seconds</item>
    </plurals>
    <string name="cancel_retry">Cancel retry</string>
    <string name="power_whitelist_title">Disable battery optimizations</string>
    <string name="power_whitelist_text">Please confirm the next dialog to add the app to the device\'s power whitelist so it can ignore battery optimizations and schedule NAT keep-alives and rekeyings accurately in order to constantly keep reachable while the VPN is established.</string>

    <!-- Quick Settings tile -->
    <string name="tile_default">Toggle VPN</string>
    <string name="tile_connect">Connect VPN</string>
    <string name="tile_disconnect">Disconnect VPN</string>

</resources>
