Tobias Brunner 04c17ab56a credential-manager: Add option to reject trusted end-entity certificates ...

This allows preventing peers from authenticating with certificates
that are locally trusted, in particular, our own local certificate (which
safeguards against accidental reuse of certificates on multiple peers).

On the other hand, if this option is enabled, end-entity certificates
for peers can't be configured anymore explicitly (e.g. via remote.certs
in swanctl.conf).

2023-11-13 12:01:41 +01:00

..

aikgen.opt

conf: Document aikgen options

2014-06-30 13:25:13 +02:00

attest.opt

conf: Install config files world-readable but warn about permissions for certain options

2014-02-12 15:16:57 +01:00

charon-logging.opt

sys-logger: Optionally support mapping strongSwan loglevels to syslog levels

2022-01-24 17:33:02 +01:00

charon-nm.opt

charon-nm: Use an XFRM interface if available

2023-02-22 13:43:17 +01:00

charon-systemd.opt

systemd: Add a native systemd journal logger

2014-09-22 14:19:37 +02:00

charon.opt

credential-manager: Add option to reject trusted end-entity certificates

2023-11-13 12:01:41 +01:00

imcv.opt

swid-gen: Share SWID generator between sw-collector, imc-swima and imc-swid

2017-08-04 19:15:26 +02:00

imv_policy_manager.opt

Some whitespace fixes

2019-08-22 15:18:06 +02:00

manager.opt

conf: Install config files world-readable but warn about permissions for certain options

2014-02-12 15:16:57 +01:00

medsrv.opt

conf: Install config files world-readable but warn about permissions for certain options

2014-02-12 15:16:57 +01:00

pki.opt

pki: Additional pki.scep options for strongswan.conf

2022-08-24 20:46:44 +02:00

pool.opt

conf: Install config files world-readable but warn about permissions for certain options

2014-02-12 15:16:57 +01:00

sec-updater.opt

sec-updater: Fix typo in documentation

2017-11-15 12:10:33 +01:00

starter.opt

starter: Remove documentation for starter.load option

2015-08-27 16:42:09 +02:00

sw-collector.opt

sw-collector: Moved info class to libimcv

2017-08-09 13:28:00 +02:00

swanctl.opt

swanctl: Read default socket from swanctl.socket option

2017-07-27 13:22:57 +02:00

tnc.opt

conf: Document libtnccs options

2014-02-12 14:34:34 +01:00