From 1a9e3e014797750508e044b7df5fbf7928baaca8 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Mon, 31 Oct 2011 18:50:10 +0100 Subject: [PATCH] pkcs11: Documented new options in strongswan.conf(5). --- man/strongswan.conf.5.in | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/man/strongswan.conf.5.in b/man/strongswan.conf.5.in index 608c970b6..ffe881a9b 100644 --- a/man/strongswan.conf.5.in +++ b/man/strongswan.conf.5.in @@ -548,8 +548,17 @@ ENGINE ID to use in the OpenSSL plugin .BR libstrongswan.plugins.pkcs11.modules List of available PKCS#11 modules .TP +.BR libstrongswan.plugins.pkcs11.use_dh " [no]" +Whether the PKCS#11 modules should be used for DH/ECDH (see use_ecc option) +.TP +.BR libstrongswan.plugins.pkcs11.use_ecc " [no]" +Whether the PKCS#11 modules should be used for ECDH/ECDSA +.TP .BR libstrongswan.plugins.pkcs11.use_hasher " [no]" Whether the PKCS#11 modules should be used to hash data +.TP +.BR libstrongswan.plugins.pkcs11.use_rng " [no]" +Whether the PKCS#11 modules should be used as RNG .SS libtnccs section .TP .BR libtnccs.tnc_config " [/etc/tnc_config]"