denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

vici: Document attributes for additional KE methods in list-sa event

Browse Source
This commit is contained in:
Tobias Brunner
2026-02-20 12:44:55 +01:00
parent 1afd5a7d23
commit 116f36ba57
1 changed files with 11 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/vici/README.md
+11 -5
View File
@@ -776,12 +776,15 @@ command.
nat-any = <yes, if any endpoint is behind a NAT (also if faked)> nat-any = <yes, if any endpoint is behind a NAT (also if faked)>
if-id-in = <hex encoded default inbound XFRM interface ID> if-id-in = <hex encoded default inbound XFRM interface ID>
if-id-out = <hex encoded default outbound XFRM interface ID> if-id-out = <hex encoded default outbound XFRM interface ID>
encr-alg = <IKE encryption algorithm string> encr-alg = <IKE encryption algorithm name>
encr-keysize = <key size for encr-alg, if applicable> encr-keysize = <key size for encr-alg, if applicable>
integ-alg = <IKE integrity algorithm string> integ-alg = <IKE integrity algorithm name>
integ-keysize = <key size for encr-alg, if applicable> integ-keysize = <key size for encr-alg, if applicable>
prf-alg = <IKE pseudo random function string> prf-alg = <IKE pseudo random function name>
dh-group = <IKE Diffie-Hellman group string> dh-group = <IKE key exchange method name>
ake1 = <first additional IKE key exchange method name, if any>
...
ake7 = <seventh additional IKE key exchange method name, if any>
established = <seconds the IKE_SA has been established> established = <seconds the IKE_SA has been established>
rekey-time = <seconds before IKE_SA gets rekeyed> rekey-time = <seconds before IKE_SA gets rekeyed>
reauth-time = <seconds before IKE_SA gets re-authenticated> reauth-time = <seconds before IKE_SA gets re-authenticated>
@@ -827,7 +830,10 @@ command.
integ-alg = <ESP or AH integrity algorithm name, if any> integ-alg = <ESP or AH integrity algorithm name, if any>
integ-keysize = <ESP or AH integrity key size, if applicable> integ-keysize = <ESP or AH integrity key size, if applicable>
prf-alg = <CHILD_SA pseudo random function name> prf-alg = <CHILD_SA pseudo random function name>
dh-group = <CHILD_SA PFS rekeying DH group name, if any> dh-group = <CHILD_SA key exchange method name, if any>
ake1 = <first additional CHILD_SA key exchange method name, if any>
...
ake7 = <seventh additional CHILD_SA key exchange method name, if any>
esn = <1 if using extended sequence numbers> esn = <1 if using extended sequence numbers>
bytes-in = <number of input bytes processed> bytes-in = <number of input bytes processed>
packets-in = <number of input packets processed> packets-in = <number of input packets processed>