denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Disable mandatory ECP support for attestion

Browse Source
This commit is contained in:
Andreas Steffen
2014-03-07 21:56:34 +01:00
parent ac17ca1ad7
commit 342bc6e545
24 changed files with 347 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf/plugins/imc-attestation.opt
+4 -1
View File
@@ -7,6 +7,9 @@ charon.plugins.imc-attestation.aik_cert =
charon.plugins.imc-attestation.aik_key =
AIK public key file.
charon.plugins.imc-attestation.mandatory_dh_groups = yes
Enforce mandatory Diffie-Hellman groups.
charon.plugins.imc-attestation.nonce_len = 20
DH nonce length.
@@ -14,4 +17,4 @@ charon.plugins.imc-attestation.use_quote2 = yes
Use Quote2 AIK signature instead of Quote signature.
charon.plugins.imc-attestation.pcr_info = yes
Whether to send pcr_before and pcr_after info.
Whether to send pcr_before and pcr_after info.
conf/plugins/imv-attestation.opt
+3
View File
@@ -1,6 +1,9 @@
charon.plugins.imv-attestation.cadir =
Path to directory with AIK cacerts.
charon.plugins.imv-attestation.mandatory_dh_groups = yes
Enforce mandatory Diffie-Hellman groups.
charon.plugins.imv-attestation.dh_group = ecp256
Preferred Diffie-Hellman group.