stroke.opt 920 B

1234567891011121314151617181920212223
  1. charon.plugins.stroke.allow_swap = yes
  2. Analyze addresses/hostnames in _left|right_ to detect which side is local
  3. and swap configuration options if necessary. If disabled _left_ is always
  4. _local_.
  5. charon.plugins.stroke.ignore_missing_ca_basic_constraint = no
  6. Treat certificates in ipsec.d/cacerts and ipsec.conf ca sections as CA
  7. certificates even if they don't contain a CA basic constraint.
  8. charon.plugins.stroke.max_concurrent = 4
  9. Maximum number of stroke messages handled concurrently.
  10. charon.plugins.stroke.prevent_loglevel_changes = no
  11. If enabled log level changes via stroke socket are not allowed.
  12. charon.plugins.stroke.secrets_file = ${sysconfdir}/ipsec.secrets
  13. Location of the ipsec.secrets file
  14. charon.plugins.stroke.socket = unix://${piddir}/charon.ctl
  15. Socket provided by the stroke plugin.
  16. charon.plugins.stroke.timeout = 0
  17. Timeout in ms for any stroke command. Use 0 to disable the timeout.