Martin Willi d1317adb9a addrblock: Support an optional non-strict mode accepting certs without addrblock ...

This allows a gateway to enforce the addrblock policy on certificates that
actually have the extension only. For (legacy) certificates not having the
extension, traffic selectors are validated/narrowed by other means, most
likely by the configuration.

2017-03-02 08:24:02 +01:00

..

options

ike-sa: Optionally try to migrate to the best path on routing priority changes

2017-02-17 11:19:38 +01:00

plugins

addrblock: Support an optional non-strict mode accepting certs without addrblock

2017-03-02 08:24:02 +01:00

.gitignore

conf: Ignore generated strongswan.conf.5.main

2014-02-18 10:08:54 +01:00

default.opt

conf: Generate and install config sippets for option descriptions

2014-02-12 14:34:33 +01:00

format-options.py

conf: Add support for escaping dots in section/option names

2015-12-04 18:22:44 +01:00

Makefile.am

addrblock: Support an optional non-strict mode accepting certs without addrblock

2017-03-02 08:24:02 +01:00

strongswan.conf

conf: Generate and install config sippets for option descriptions

2014-02-12 14:34:33 +01:00

strongswan.conf.5.head.in

conf: Split strongswan.conf(5) man page and use generated snippet

2014-02-12 14:34:33 +01:00

strongswan.conf.5.tail.in

conf: Document variables and config files/dirs

2014-02-12 14:34:34 +01:00