Annotation of elwix/config/etc/default/strongswan/strongswan.d/charon/stroke.conf, revision 1.2

1.2     ! misho       1: stroke {
        !             2: 
        !             3:     # Analyze addresses/hostnames in left|right to detect which side is local
        !             4:     # and swap configuration options if necessary. If disabled left is always
        !             5:     # local.
        !             6:     # allow_swap = yes
        !             7: 
        !             8:     # Treat certificates in ipsec.d/cacerts and ipsec.conf ca sections as CA
        !             9:     # certificates even if they don't contain a CA basic constraint.
        !            10:     # ignore_missing_ca_basic_constraint = no
        !            11: 
        !            12:     # Whether to load the plugin. Can also be an integer to increase the
        !            13:     # priority of this plugin.
        !            14:     load = yes
        !            15: 
        !            16:     # Maximum number of stroke messages handled concurrently.
        !            17:     # max_concurrent = 4
        !            18: 
        !            19:     # If enabled log level changes via stroke socket are not allowed.
        !            20:     # prevent_loglevel_changes = no
        !            21: 
        !            22:     # Location of the ipsec.secrets file
        !            23:     # secrets_file = ${sysconfdir}/ipsec.secrets
        !            24: 
        !            25:     # Socket provided by the stroke plugin.
        !            26:     # socket = unix://${piddir}/charon.ctl
        !            27: 
        !            28:     # Timeout in ms for any stroke command. Use 0 to disable the timeout.
        !            29:     # timeout = 0
        !            30: 
        !            31: }
        !            32: 

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>