summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMarkos Chandras <hwoarang@gentoo.org>2010-05-10 17:00:51 +0000
committerMarkos Chandras <hwoarang@gentoo.org>2010-05-10 17:00:51 +0000
commit2d444014431b8d7f2651f6f2d7457b5d3300038d (patch)
treebaac7b7fdfa8eaf0e18879571cce74b555cd7c28 /net-misc/strongswan/metadata.xml
parentx86 stable wrt bug #318457 (diff)
downloadhistorical-2d444014431b8d7f2651f6f2d7457b5d3300038d.tar.gz
historical-2d444014431b8d7f2651f6f2d7457b5d3300038d.tar.bz2
historical-2d444014431b8d7f2651f6f2d7457b5d3300038d.zip
Version bump thanks to Matthias Dahl
Package-Manager: portage-2.2_rc67/cvs/Linux x86_64
Diffstat (limited to 'net-misc/strongswan/metadata.xml')
-rw-r--r--net-misc/strongswan/metadata.xml33
1 files changed, 21 insertions, 12 deletions
diff --git a/net-misc/strongswan/metadata.xml b/net-misc/strongswan/metadata.xml
index 6953e6b7177e..4a999e41ff9d 100644
--- a/net-misc/strongswan/metadata.xml
+++ b/net-misc/strongswan/metadata.xml
@@ -23,15 +23,19 @@
<flag name="cisco">
Enable support for the Cisco VPN client.
</flag>
+ <flag name="dhcp">
+ Enable server support for querying virtual IP addresses for clients
+ from a DHCP server. (IKEv2 only)
+ </flag>
+ <flag name="farp">
+ Enable faking of ARP responses for virtual IP addresses assigned to
+ clients. (IKEv2 only)
+ </flag>
<flag name="gcrypt">
Enable <pkg>dev-libs/libgcrypt</pkg> plugin which provides 3DES, AES,
Blowfish, Camellia, CAST, DES, Serpent and Twofish ciphers along with
- MD4, MD5 and SHA1/2 hash algorithms, RSA and a software random number
- generator.
- </flag>
- <flag name="nat-transport">
- Enable potentially insecure NAT traversal for transport mode in IKEv1.
- Only enable if you really need this.
+ MD4, MD5 and SHA1/2 hash algorithms, RSA and DH groups 1,2,5,14-18 and
+ 22-24(4.4+). Also includes a software random number generator.
</flag>
<flag name="ikev1">
Enable IKEv1 protocol (pluto daemon).
@@ -39,17 +43,22 @@
<flag name="ikev2">
Enable IKEv2 protocol (charon daemon).
</flag>
- <flag name="openssl">
- Enable <pkg>dev-libs/openssl</pkg> plugin which is required for Elliptic
- Curve Cryptography (Diffie-Hellman groups 19-21, 25, 26) and ECDSA. Also
- provides 3DES, AES, Blowfish, Camellia, CAST, DES, IDEA and RC5 ciphers
- along with MD2, MD4, MD5 and SHA1/2 hash algorithms and RSA.
- <pkg>dev-libs/openssl</pkg> has to be compiled with USE="-bindist".
+ <flag name="nat-transport">
+ Enable potentially insecure NAT traversal for transport mode in IKEv1.
+ Only enable if you really need this.
</flag>
<flag name="non-root">
Force IKEv1/IKEv2 daemons to normal user privileges. This might impose
some restrictions mainly to the IKEv1 daemon. Disable only if you really
require superuser privileges.
</flag>
+ <flag name="openssl">
+ Enable <pkg>dev-libs/openssl</pkg> plugin which is required for Elliptic
+ Curve Cryptography (DH groups 19-21,25,26) and ECDSA. Also provides 3DES,
+ AES, Blowfish, Camellia, CAST, DES, IDEA and RC5 ciphers along with MD2,
+ MD4, MD5 and SHA1/2 hash algorithms, RSA and DH groups 1,2,5,14-18 and
+ 22-24(4.4+)
+ <pkg>dev-libs/openssl</pkg> has to be compiled with USE="-bindist".
+ </flag>
</use>
</pkgmetadata>