added strongswan.conf attributes for attestation IMC/IMV
This commit is contained in:
+32
-11
@@ -565,26 +565,47 @@ Debug level for a stand-alone libimcv library
|
|||||||
Disable output to stderr with a stand-alone libimcv library
|
Disable output to stderr with a stand-alone libimcv library
|
||||||
.SS libimcv plugins section
|
.SS libimcv plugins section
|
||||||
.TP
|
.TP
|
||||||
.BR libimcv.plugins.imc_test.command " [none]"
|
.BR libimcv.plugins.imc-attestation.platform_info
|
||||||
Command to be sent to the Test IMV
|
Information on operating system and hardware platform
|
||||||
.TP
|
.TP
|
||||||
.BR libimcv.plugins.imc_test.retry " [no]"
|
.BR libimcv.plugins.imc-attestation.aik_cert
|
||||||
Do a handshake retry
|
AIK certificate file
|
||||||
.TP
|
.TP
|
||||||
.BR libimcv.plugins.imc_test.retry_command
|
.BR libimcv.plugins.imc-attestation.aik_key
|
||||||
Command to be sent to the Test IMV in the handshake retry
|
AIK public key file
|
||||||
.TP
|
.TP
|
||||||
.BR libimcv.plugins.imv_test.rounds " [0]"
|
.BR libimcv.plugins.imv-attestation.cadir
|
||||||
Number of IMC-IMV retry rounds
|
Path to directory with AIK cacerts
|
||||||
.TP
|
.TP
|
||||||
.BR libimcv.plugins.imv_scanner.closed_port_policy " [yes]"
|
.BR libimcv.plugins.imv-attestation.database
|
||||||
|
Path to database with file measurement information
|
||||||
|
.TP
|
||||||
|
.BR libimcv.plugins.imv-attestation.hash_algorithm " [sha1]"
|
||||||
|
Preferred measurement hash algorithm
|
||||||
|
.TP
|
||||||
|
.BR libimcv.plugins.imv-attestation.platform_info
|
||||||
|
Information on operating system and hardware platform
|
||||||
|
.TP
|
||||||
|
.BR libimcv.plugins.imv-scanner.closed_port_policy " [yes]"
|
||||||
By default all ports must be closed (yes) or can be open (no)
|
By default all ports must be closed (yes) or can be open (no)
|
||||||
.TP
|
.TP
|
||||||
.BR libimcv.plugins.imv_scanner.tcp_ports
|
.BR libimcv.plugins.imv-scanner.tcp_ports
|
||||||
List of TCP ports that can be open or must be closed
|
List of TCP ports that can be open or must be closed
|
||||||
.TP
|
.TP
|
||||||
.BR libimcv.plugins.imv_scanner.udp_ports
|
.BR libimcv.plugins.imv-scanner.udp_ports
|
||||||
List of UDP ports that can be open or must be closed
|
List of UDP ports that can be open or must be closed
|
||||||
|
.TP
|
||||||
|
.BR libimcv.plugins.imc-test.command " [none]"
|
||||||
|
Command to be sent to the Test IMV
|
||||||
|
.TP
|
||||||
|
.BR libimcv.plugins.imc-test.retry " [no]"
|
||||||
|
Do a handshake retry
|
||||||
|
.TP
|
||||||
|
.BR libimcv.plugins.imc-test.retry_command
|
||||||
|
Command to be sent to the Test IMV in the handshake retry
|
||||||
|
.TP
|
||||||
|
.BR libimcv.plugins.imv-test.rounds " [0]"
|
||||||
|
Number of IMC-IMV retry rounds
|
||||||
.SS libtls section
|
.SS libtls section
|
||||||
.TP
|
.TP
|
||||||
.BR libtls.cipher
|
.BR libtls.cipher
|
||||||
|
|||||||
Reference in New Issue
Block a user