added strongswan.conf attributes for attestation IMC/IMV

This commit is contained in:
Andreas Steffen
2011-09-08 12:08:17 +02:00
parent fc25e330ae
commit f7a98122ea
+32 -11
View File
@@ -565,26 +565,47 @@ Debug level for a stand-alone libimcv library
Disable output to stderr with a stand-alone libimcv library Disable output to stderr with a stand-alone libimcv library
.SS libimcv plugins section .SS libimcv plugins section
.TP .TP
.BR libimcv.plugins.imc_test.command " [none]" .BR libimcv.plugins.imc-attestation.platform_info
Command to be sent to the Test IMV Information on operating system and hardware platform
.TP .TP
.BR libimcv.plugins.imc_test.retry " [no]" .BR libimcv.plugins.imc-attestation.aik_cert
Do a handshake retry AIK certificate file
.TP .TP
.BR libimcv.plugins.imc_test.retry_command .BR libimcv.plugins.imc-attestation.aik_key
Command to be sent to the Test IMV in the handshake retry AIK public key file
.TP .TP
.BR libimcv.plugins.imv_test.rounds " [0]" .BR libimcv.plugins.imv-attestation.cadir
Number of IMC-IMV retry rounds Path to directory with AIK cacerts
.TP .TP
.BR libimcv.plugins.imv_scanner.closed_port_policy " [yes]" .BR libimcv.plugins.imv-attestation.database
Path to database with file measurement information
.TP
.BR libimcv.plugins.imv-attestation.hash_algorithm " [sha1]"
Preferred measurement hash algorithm
.TP
.BR libimcv.plugins.imv-attestation.platform_info
Information on operating system and hardware platform
.TP
.BR libimcv.plugins.imv-scanner.closed_port_policy " [yes]"
By default all ports must be closed (yes) or can be open (no) By default all ports must be closed (yes) or can be open (no)
.TP .TP
.BR libimcv.plugins.imv_scanner.tcp_ports .BR libimcv.plugins.imv-scanner.tcp_ports
List of TCP ports that can be open or must be closed List of TCP ports that can be open or must be closed
.TP .TP
.BR libimcv.plugins.imv_scanner.udp_ports .BR libimcv.plugins.imv-scanner.udp_ports
List of UDP ports that can be open or must be closed List of UDP ports that can be open or must be closed
.TP
.BR libimcv.plugins.imc-test.command " [none]"
Command to be sent to the Test IMV
.TP
.BR libimcv.plugins.imc-test.retry " [no]"
Do a handshake retry
.TP
.BR libimcv.plugins.imc-test.retry_command
Command to be sent to the Test IMV in the handshake retry
.TP
.BR libimcv.plugins.imv-test.rounds " [0]"
Number of IMC-IMV retry rounds
.SS libtls section .SS libtls section
.TP .TP
.BR libtls.cipher .BR libtls.cipher