strongswan/conf
Thomas Egerer 05e373aeb0 ike: Optionally allow private algorithms for IKE/CHILD_SAs
Charon refuses to make use of algorithms IDs from the private space
for unknown peer implementations [1]. If you chose to ignore and violate
that section of the RFC since you *know* your peers *must* support those
private IDs, there's no way to disable that behavior.

With this commit a strongswan.conf option is introduced which allows to
deliberately ignore parts of section 3.12 from the standard.

[1] http://tools.ietf.org/html/rfc7296#section-3.12

Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>
2020-03-06 11:15:15 +01:00
..
options ike: Optionally allow private algorithms for IKE/CHILD_SAs 2020-03-06 11:15:15 +01:00
plugins Spelling fixes 2020-02-11 18:23:07 +01:00
.gitignore conf: Ignore generated strongswan.conf.5.main 2014-02-18 10:08:54 +01:00
Makefile.am drbg: Implemented NIST SP-800-90A DRBG 2019-10-16 16:46:24 +02:00
default.opt conf: Generate and install config sippets for option descriptions 2014-02-12 14:34:33 +01:00
format-options.py conf: Complete ordering functions for ConfigOption class 2020-01-29 13:31:42 +01:00
strongswan.conf conf: Generate and install config sippets for option descriptions 2014-02-12 14:34:33 +01:00
strongswan.conf.5.head.in settings: Don't allow dots in section/key names anymore 2018-09-11 18:30:18 +02:00
strongswan.conf.5.tail.in Spelling fixes 2020-02-11 18:23:07 +01:00