1234567891011121314151617181920212223 |
- charon.plugins.stroke.allow_swap = yes
- Analyze addresses/hostnames in _left|right_ to detect which side is local
- and swap configuration options if necessary. If disabled _left_ is always
- _local_.
- charon.plugins.stroke.ignore_missing_ca_basic_constraint = no
- Treat certificates in ipsec.d/cacerts and ipsec.conf ca sections as CA
- certificates even if they don't contain a CA basic constraint.
- charon.plugins.stroke.max_concurrent = 4
- Maximum number of stroke messages handled concurrently.
- charon.plugins.stroke.prevent_loglevel_changes = no
- If enabled log level changes via stroke socket are not allowed.
- charon.plugins.stroke.secrets_file = ${sysconfdir}/ipsec.secrets
- Location of the ipsec.secrets file
- charon.plugins.stroke.socket = unix://${piddir}/charon.ctl
- Socket provided by the stroke plugin.
- charon.plugins.stroke.timeout = 0
- Timeout in ms for any stroke command. Use 0 to disable the timeout.
|