stroke.conf 986 B

1234567891011121314151617181920212223242526272829303132
  1. stroke {
  2. # Analyze addresses/hostnames in left|right to detect which side is local
  3. # and swap configuration options if necessary. If disabled left is always
  4. # local.
  5. # allow_swap = yes
  6. # Treat certificates in ipsec.d/cacerts and ipsec.conf ca sections as CA
  7. # certificates even if they don't contain a CA basic constraint.
  8. # ignore_missing_ca_basic_constraint = no
  9. # Whether to load the plugin. Can also be an integer to increase the
  10. # priority of this plugin.
  11. load = yes
  12. # Maximum number of stroke messages handled concurrently.
  13. # max_concurrent = 4
  14. # If enabled log level changes via stroke socket are not allowed.
  15. # prevent_loglevel_changes = no
  16. # Location of the ipsec.secrets file
  17. # secrets_file = ${sysconfdir}/ipsec.secrets
  18. # Socket provided by the stroke plugin.
  19. # socket = unix://${piddir}/charon.ctl
  20. # Timeout in ms for any stroke command. Use 0 to disable the timeout.
  21. # timeout = 0
  22. }