conf: Document options of plugins in libpts

This commit is contained in:
Tobias Brunner 2014-02-07 14:44:19 +01:00
parent 50fdff70e8
commit 5ac757872b
5 changed files with 57 additions and 0 deletions

View File

@ -8,6 +8,7 @@ optionstemplatedir = $(templatesdir)/strongswan.d
pluginstemplatedir = $(templatesdir)/plugins
options = \
options/attest.opt \
options/charon.opt \
options/charon-logging.opt \
options/imcv.opt \
@ -37,9 +38,12 @@ plugins = \
plugins/error-notify.opt \
plugins/gcrypt.opt \
plugins/ha.opt \
plugins/imc-attestation.opt \
plugins/imc-os.opt \
plugins/imc-scanner.opt \
plugins/imc-swid.opt \
plugins/imc-test.opt \
plugins/imv-attestation.opt \
plugins/imv-os.opt \
plugins/imv-scanner.opt \
plugins/imv-test.opt \

5
conf/options/attest.opt Normal file
View File

@ -0,0 +1,5 @@
attest.database =
Path to database with file measurement information.
attest.load =
Plugins to load in ipsec attest tool.

View File

@ -0,0 +1,17 @@
charon.plugins.imc-attestation.aik_blob =
AIK encrypted private key blob file.
charon.plugins.imc-attestation.aik_cert =
AIK certificate file.
charon.plugins.imc-attestation.aik_key =
AIK public key file.
charon.plugins.imc-attestation.nonce_len = 20
DH nonce length.
charon.plugins.imc-attestation.use_quote2 = yes
Use Quote2 AIK signature instead of Quote signature.
charon.plugins.imc-attestation.pcr_info = yes
Whether to send pcr_before and pcr_after info.

View File

@ -0,0 +1,2 @@
charon.plugins.imc-swid.swid_directory = ${prefix}/share
Directory where SWID tags are located.

View File

@ -0,0 +1,29 @@
charon.plugins.imv-attestation.cadir =
Path to directory with AIK cacerts.
charon.plugins.imv-attestation.dh_group = ecp256
Preferred Diffie-Hellman group.
charon.plugins.imv-attestation.hash_algorithm = sha256
Preferred measurement hash algorithm.
charon.plugins.imv-attestation.min_nonce_len = 0
DH minimum nonce length.
charon.plugins.imc-attestation.pcr17_after
Dummy data if the TBOOT log is not retrieved.
charon.plugins.imc-attestation.pcr17_before
Dummy data if the TBOOT log is not retrieved.
charon.plugins.imc-attestation.pcr17_meas
Dummy data if the TBOOT log is not retrieved.
charon.plugins.imc-attestation.pcr18_after
Dummy data if the TBOOT log is not retrieved.
charon.plugins.imc-attestation.pcr18_before
Dummy data if the TBOOT log is not retrieved.
charon.plugins.imc-attestation.pcr18_meas
Dummy data if the TBOOT log is not retrieved.