diff options
author | Markos Chandras <hwoarang@gentoo.org> | 2010-05-10 17:00:51 +0000 |
---|---|---|
committer | Markos Chandras <hwoarang@gentoo.org> | 2010-05-10 17:00:51 +0000 |
commit | 2d444014431b8d7f2651f6f2d7457b5d3300038d (patch) | |
tree | baac7b7fdfa8eaf0e18879571cce74b555cd7c28 /net-misc/strongswan/metadata.xml | |
parent | x86 stable wrt bug #318457 (diff) | |
download | historical-2d444014431b8d7f2651f6f2d7457b5d3300038d.tar.gz historical-2d444014431b8d7f2651f6f2d7457b5d3300038d.tar.bz2 historical-2d444014431b8d7f2651f6f2d7457b5d3300038d.zip |
Version bump thanks to Matthias Dahl
Package-Manager: portage-2.2_rc67/cvs/Linux x86_64
Diffstat (limited to 'net-misc/strongswan/metadata.xml')
-rw-r--r-- | net-misc/strongswan/metadata.xml | 33 |
1 files changed, 21 insertions, 12 deletions
diff --git a/net-misc/strongswan/metadata.xml b/net-misc/strongswan/metadata.xml index 6953e6b7177e..4a999e41ff9d 100644 --- a/net-misc/strongswan/metadata.xml +++ b/net-misc/strongswan/metadata.xml @@ -23,15 +23,19 @@ <flag name="cisco"> Enable support for the Cisco VPN client. </flag> + <flag name="dhcp"> + Enable server support for querying virtual IP addresses for clients + from a DHCP server. (IKEv2 only) + </flag> + <flag name="farp"> + Enable faking of ARP responses for virtual IP addresses assigned to + clients. (IKEv2 only) + </flag> <flag name="gcrypt"> Enable <pkg>dev-libs/libgcrypt</pkg> plugin which provides 3DES, AES, Blowfish, Camellia, CAST, DES, Serpent and Twofish ciphers along with - MD4, MD5 and SHA1/2 hash algorithms, RSA and a software random number - generator. - </flag> - <flag name="nat-transport"> - Enable potentially insecure NAT traversal for transport mode in IKEv1. - Only enable if you really need this. + MD4, MD5 and SHA1/2 hash algorithms, RSA and DH groups 1,2,5,14-18 and + 22-24(4.4+). Also includes a software random number generator. </flag> <flag name="ikev1"> Enable IKEv1 protocol (pluto daemon). @@ -39,17 +43,22 @@ <flag name="ikev2"> Enable IKEv2 protocol (charon daemon). </flag> - <flag name="openssl"> - Enable <pkg>dev-libs/openssl</pkg> plugin which is required for Elliptic - Curve Cryptography (Diffie-Hellman groups 19-21, 25, 26) and ECDSA. Also - provides 3DES, AES, Blowfish, Camellia, CAST, DES, IDEA and RC5 ciphers - along with MD2, MD4, MD5 and SHA1/2 hash algorithms and RSA. - <pkg>dev-libs/openssl</pkg> has to be compiled with USE="-bindist". + <flag name="nat-transport"> + Enable potentially insecure NAT traversal for transport mode in IKEv1. + Only enable if you really need this. </flag> <flag name="non-root"> Force IKEv1/IKEv2 daemons to normal user privileges. This might impose some restrictions mainly to the IKEv1 daemon. Disable only if you really require superuser privileges. </flag> + <flag name="openssl"> + Enable <pkg>dev-libs/openssl</pkg> plugin which is required for Elliptic + Curve Cryptography (DH groups 19-21,25,26) and ECDSA. Also provides 3DES, + AES, Blowfish, Camellia, CAST, DES, IDEA and RC5 ciphers along with MD2, + MD4, MD5 and SHA1/2 hash algorithms, RSA and DH groups 1,2,5,14-18 and + 22-24(4.4+) + <pkg>dev-libs/openssl</pkg> has to be compiled with USE="-bindist". + </flag> </use> </pkgmetadata> |