Project

General

Profile

Autoconf options for the most current strongSwan release » History » Version 44

Tobias Brunner, 11.03.2016 10:53
Updated for 5.4.0

1 28 Tobias Brunner
h1. Autoconf options for the most current strongSwan release
2 1 Andreas Steffen
3 2 Andreas Steffen
{{>toc}}
4 2 Andreas Steffen
5 19 Tobias Brunner
bq. *Please note:* This page documents the _./configure_ options for the most current release. Therefore, you should always use _./configure --help_ to check which options are actually available for the release you are using.
6 1 Andreas Steffen
7 1 Andreas Steffen
h2. --dir options
8 1 Andreas Steffen
9 19 Tobias Brunner
*Some directories can be configure through [[Autoconf#--with-options|--with options]].*
10 19 Tobias Brunner
11 1 Andreas Steffen
--prefix=PREFIX
12 1 Andreas Steffen
13 1 Andreas Steffen
p((. where to put installation [ _/usr/local_ ]. Most Linux distributions use _"/usr"_.
14 1 Andreas Steffen
15 1 Andreas Steffen
--libexecdir=LIBEXECDIR
16 1 Andreas Steffen
17 1 Andreas Steffen
p((. program executables [ _PREFIX/libexec_ ]
18 16 Tobias Brunner
19 16 Tobias Brunner
--libdir=LIBDIR
20 16 Tobias Brunner
21 16 Tobias Brunner
p((. shared libraries [ _PREFIX/lib_ ]
22 1 Andreas Steffen
 
23 1 Andreas Steffen
--sysconfdir=SYSCONFDIR
24 1 Andreas Steffen
25 1 Andreas Steffen
p((. where to put configuration files [ _PREFIX/etc_ ]. We strongly recommend _"/etc"_.
26 1 Andreas Steffen
27 17 Tobias Brunner
h2. --enable options
28 1 Andreas Steffen
29 17 Tobias Brunner
*The [[pluginlist|plugin list]] provides more information on specific plugins.*
30 17 Tobias Brunner
31 34 Tobias Brunner
--enable-acert
32 34 Tobias Brunner
33 43 Tobias Brunner
p((. enable X.509 attribute certificate checking plugin [ _no_ ]. Since version:5.1.3.
34 34 Tobias Brunner
35 1 Andreas Steffen
--enable-addrblock
36 1 Andreas Steffen
37 34 Tobias Brunner
p((. enable RFC 3779 address block constraint support plugin [ _no_ ].
38 1 Andreas Steffen
39 40 Tobias Brunner
--enable-aesni
40 40 Tobias Brunner
41 40 Tobias Brunner
p((. enable Intel AES-NI crypto plugin [ _no_ ]. Since version:5.3.1.
42 40 Tobias Brunner
43 6 Andreas Steffen
--enable-af-alg
44 6 Andreas Steffen
45 6 Andreas Steffen
p((. enable AF_ALG crypto interface to Linux Crypto API [ _no_ ]. 
46 6 Andreas Steffen
47 1 Andreas Steffen
--enable-agent
48 1 Andreas Steffen
49 6 Andreas Steffen
p((. enable the ssh-agent signing plugin [ _no_ ]. 
50 1 Andreas Steffen
51 35 Tobias Brunner
--enable-aikgen
52 35 Tobias Brunner
53 43 Tobias Brunner
p((. enable AIK generator [ _no_ ]. Since version:5.2.0.
54 35 Tobias Brunner
55 34 Tobias Brunner
--enable-all
56 34 Tobias Brunner
57 43 Tobias Brunner
p((. enable all optional plugins and features (they can be disabled with their respective --disable options) [ _no_ ]. Mainly intended for testing. Since version:5.1.3.
58 34 Tobias Brunner
59 1 Andreas Steffen
--enable-android
60 1 Andreas Steffen
61 22 Tobias Brunner
p((. enable Android specific plugin [ _no_ ]. 
62 1 Andreas Steffen
63 22 Tobias Brunner
--enable-android-log
64 22 Tobias Brunner
65 22 Tobias Brunner
p((. enable Android specific logger plugin [ _no_ ].
66 22 Tobias Brunner
67 1 Andreas Steffen
--enable-attr-sql
68 1 Andreas Steffen
69 6 Andreas Steffen
p((. enable the SQL based configuration attribute plugin [ _no_ ]. 
70 1 Andreas Steffen
 This is a plugin for VPN gateways only, serving virtual IP addresses
71 1 Andreas Steffen
72 28 Tobias Brunner
--enable-bfd-backtraces
73 28 Tobias Brunner
74 43 Tobias Brunner
p((. use binutil's libbfd to resolve backtraces for memory leaks and segfaults [ _no_ ]. Since version:5.0.1.
75 28 Tobias Brunner
76 38 Tobias Brunner
--enable-bliss
77 38 Tobias Brunner
78 38 Tobias Brunner
p((. enable Bimodal Lattice Signature Scheme (BLISS) software implementation plugin [ _no_ ]. Since version:5.2.2.
79 38 Tobias Brunner
80 1 Andreas Steffen
--enable-blowfish
81 1 Andreas Steffen
82 1 Andreas Steffen
p((. enable Blowfish software implementation plugin [ _no_ ].
83 1 Andreas Steffen
84 1 Andreas Steffen
--enable-ccm
85 1 Andreas Steffen
86 1 Andreas Steffen
p((. enable the CCM AEAD wrapper crypto plugin [ _no_ ].
87 1 Andreas Steffen
88 41 Tobias Brunner
--enable-chapoly
89 41 Tobias Brunner
90 41 Tobias Brunner
p((. enables the ChaCha20/Poly1305 AEAD plugin [ _no_ ]. Since version:5.3.3.
91 41 Tobias Brunner
92 19 Tobias Brunner
--enable-certexpire
93 19 Tobias Brunner
94 19 Tobias Brunner
p((. enable CSV export of expiration dates of used certificates [ _no_ ].
95 1 Andreas Steffen
96 28 Tobias Brunner
--enable-cmd
97 28 Tobias Brunner
98 43 Tobias Brunner
p((. enable the command line IKE client charon-cmd [ _no_ ]. Since version:5.1.0.
99 28 Tobias Brunner
100 6 Andreas Steffen
--enable-conftest
101 1 Andreas Steffen
102 33 Tobias Brunner
p((. enable the [[IpsecConftest|IKE conformance test framework]] [ _no_ ].
103 9 Andreas Steffen
104 39 Tobias Brunner
--enable-connmark
105 39 Tobias Brunner
106 39 Tobias Brunner
p((. enable [[connmark]] plugin, which enables conntrack based marks to select return path SA [ _no_ ]. Since version:5.3.0.
107 39 Tobias Brunner
108 1 Andreas Steffen
--enable-coupling
109 1 Andreas Steffen
110 19 Tobias Brunner
p((. enable IKEv2 plugin to couple peer certificates permanently to authentication [ _no_ ].
111 1 Andreas Steffen
112 28 Tobias Brunner
--enable-coverage
113 28 Tobias Brunner
114 43 Tobias Brunner
p((. enable lcov coverage report report generation [ _no_ ]. Since version:5.1.0.
115 28 Tobias Brunner
*Note:* This disables any optimization, so it shouldn't be enabled when building production releases.
116 28 Tobias Brunner
117 1 Andreas Steffen
--enable-ctr
118 1 Andreas Steffen
119 1 Andreas Steffen
p((. enable the counter mode wrapper crypto plugin [ _no_ ].
120 16 Tobias Brunner
121 16 Tobias Brunner
--enable-curl
122 1 Andreas Steffen
123 16 Tobias Brunner
p((. enable plugin to fetch files (CRL/OCSP) via libcurl [ _no_ ]. Requires libcurl.
124 16 Tobias Brunner
125 35 Tobias Brunner
--enable-dbghelp-backtraces
126 35 Tobias Brunner
127 43 Tobias Brunner
p((. use dbghlp.dll on Windows to create and print backtraces for memory leaks and segfaults [ _no_ ]. Since version:5.2.0.
128 35 Tobias Brunner
129 1 Andreas Steffen
--enable-dhcp
130 1 Andreas Steffen
131 19 Tobias Brunner
p((. enable DHCP based attribute provider plugin. [ _no_ ].
132 1 Andreas Steffen
133 30 Tobias Brunner
--enable-dnscert
134 30 Tobias Brunner
135 43 Tobias Brunner
p((. enable plugin that authenticates peers based on CERT resource records in the DNS protected by DNSSEC [ _no_ ]. Since version:5.1.1.
136 30 Tobias Brunner
137 1 Andreas Steffen
--enable-dumm
138 1 Andreas Steffen
139 1 Andreas Steffen
p((. build the new UML test framework [ _no_ ]. See [[DynamicUmlMeshModeler|DUMM]].
140 1 Andreas Steffen
141 9 Andreas Steffen
--enable-duplicheck
142 9 Andreas Steffen
143 19 Tobias Brunner
p((. enable advanced duplicate checking plugin using liveness checks [ _no_ ].
144 1 Andreas Steffen
145 1 Andreas Steffen
--enable-eap-aka
146 1 Andreas Steffen
147 19 Tobias Brunner
p((. build EAP AKA authentication module [ _no_ ].
148 1 Andreas Steffen
149 1 Andreas Steffen
--enable-eap-aka-3gpp2
150 1 Andreas Steffen
151 1 Andreas Steffen
p((. build EAP AKA backend module implementing 3GPP2 algorithm in software [ _no_ ]. Requires libgmp.
152 1 Andreas Steffen
153 22 Tobias Brunner
--enable-eap-dynamic
154 22 Tobias Brunner
155 22 Tobias Brunner
p((. build dynamic EAP proxy module [ _no_ ].
156 22 Tobias Brunner
157 1 Andreas Steffen
--enable-eap-gtc
158 1 Andreas Steffen
159 22 Tobias Brunner
p((. build [[EapGtc|EAP GTC]] authentication module [ _no_ ].
160 1 Andreas Steffen
161 1 Andreas Steffen
--enable-eap-identity
162 1 Andreas Steffen
163 1 Andreas Steffen
p((. build EAP module providing EAP-Identity helper [ _no_ ].
164 1 Andreas Steffen
165 1 Andreas Steffen
--enable-eap-md5
166 1 Andreas Steffen
167 19 Tobias Brunner
p((. build EAP MD5 (CHAP) authentication module [ _no_ ].
168 1 Andreas Steffen
169 1 Andreas Steffen
--enable-eap-mschapv2
170 1 Andreas Steffen
171 19 Tobias Brunner
p((. enable EAP MS-CHAPv2 authentication module [ _no_ ].
172 10 Andreas Steffen
173 10 Andreas Steffen
--enable-eap-peap
174 1 Andreas Steffen
175 1 Andreas Steffen
p((. enable EAP PEAP authentication plugin [ _no_ ].
176 1 Andreas Steffen
177 1 Andreas Steffen
--enable-eap-radius
178 1 Andreas Steffen
179 19 Tobias Brunner
p((. enable [[EapRadius|RADIUS]] proxy authentication module for EAP [ _no_ ].
180 1 Andreas Steffen
181 1 Andreas Steffen
--enable-eap-sim
182 1 Andreas Steffen
183 19 Tobias Brunner
p((. enable EAP-SIM authentication module [ _no_ ].
184 1 Andreas Steffen
185 16 Tobias Brunner
--enable-eap-sim-file
186 11 Andreas Steffen
187 19 Tobias Brunner
p((. enable EAP-SIM back end based on a triplets file [ _no_ ].
188 11 Andreas Steffen
189 11 Andreas Steffen
--enable-eap-sim-pcsc
190 1 Andreas Steffen
191 19 Tobias Brunner
p((. enable EAP-SIM back end based on a smartcard reader [ _no_ ]. Requires libpcsclite.
192 1 Andreas Steffen
193 1 Andreas Steffen
--enable-eap-simaka-pseudonym
194 1 Andreas Steffen
195 1 Andreas Steffen
p((. enable EAP-SIM/AKA pseudonym storage [ _no_ ].
196 1 Andreas Steffen
197 1 Andreas Steffen
--enable-eap-simaka-reauth
198 1 Andreas Steffen
199 1 Andreas Steffen
p((. enable EAP-SIM/AKA reauthentication data storage [ _no_ ].
200 1 Andreas Steffen
201 1 Andreas Steffen
--enable-eap-simaka-sql
202 1 Andreas Steffen
203 19 Tobias Brunner
p((. enable EAP-SIM/AKA backend based on a triplet/quintuplet SQL database [ _no_ ].
204 1 Andreas Steffen
205 1 Andreas Steffen
--enable-eap-tls
206 1 Andreas Steffen
207 1 Andreas Steffen
p((. enable EAP TLS authentication plugin [ _no_ ].
208 1 Andreas Steffen
209 1 Andreas Steffen
--enable-eap-tnc
210 1 Andreas Steffen
211 1 Andreas Steffen
p((. enable EAP TNC trusted network connect plugin [ _no_ ].
212 1 Andreas Steffen
213 1 Andreas Steffen
--enable-eap-ttls
214 1 Andreas Steffen
215 1 Andreas Steffen
p((. enable EAP TTLS authentication plugin [ _no_ ].
216 1 Andreas Steffen
217 23 Tobias Brunner
--enable-error-notify
218 23 Tobias Brunner
219 23 Tobias Brunner
p((. enable [[ErrorNotifyPlugin|error notification plugin]] [ _no_ ].
220 23 Tobias Brunner
221 37 Tobias Brunner
--enable-ext-auth
222 37 Tobias Brunner
223 37 Tobias Brunner
p((. enable plugin calling an external authorization script [ _no_ ]. Since version:5.2.1.
224 37 Tobias Brunner
225 1 Andreas Steffen
--enable-farp
226 1 Andreas Steffen
227 19 Tobias Brunner
p((.  enable ARP faking plugin that responds to ARP requests for virtual IPs assigned to peers [ _no_ ].
228 1 Andreas Steffen
229 1 Andreas Steffen
--enable-fast
230 1 Andreas Steffen
231 19 Tobias Brunner
p((. build libfast (FastCGI Application Server w/ templates) [ _no_ ]. See [[libfast]].
232 1 Andreas Steffen
233 39 Tobias Brunner
--enable-files
234 39 Tobias Brunner
235 39 Tobias Brunner
p((. enable simple file:// URI fetcher [ _no_ ]. Since version:5.3.0.
236 39 Tobias Brunner
237 39 Tobias Brunner
--enable-forecast
238 39 Tobias Brunner
239 39 Tobias Brunner
p((. enable [[forecast]] plugin, which forwards broadcast/multicast messages [ _no_ ]. Since version:5.3.0.
240 39 Tobias Brunner
241 1 Andreas Steffen
--enable-gcm
242 1 Andreas Steffen
243 1 Andreas Steffen
p((. enable the GCM AEAD wrapper crypto plugin [ _no_ ].
244 1 Andreas Steffen
245 1 Andreas Steffen
--enable-gcrypt
246 1 Andreas Steffen
247 1 Andreas Steffen
p((. enable the libgcrypt plugin [ _no_ ]. Requires the GNU Libgcrypt library.
248 1 Andreas Steffen
249 1 Andreas Steffen
--enable-ha
250 1 Andreas Steffen
251 1 Andreas Steffen
p((. enable the [[HighAvailability|high availability]] cluster plugin [ _no_ ]. 
252 19 Tobias Brunner
253 19 Tobias Brunner
--enable-imc-attestation
254 1 Andreas Steffen
255 23 Tobias Brunner
p((. enable IMC attestation module [ _no_ ].
256 1 Andreas Steffen
257 41 Tobias Brunner
--enable-imc-hcd
258 41 Tobias Brunner
259 41 Tobias Brunner
p((. enable [[HCD-IMC|IMC hcd]] module [ _no_ ]. Since version:5.3.3.
260 41 Tobias Brunner
261 23 Tobias Brunner
--enable-imc-os
262 23 Tobias Brunner
263 23 Tobias Brunner
p((. enable IMC operating system module [ _no_ ].
264 23 Tobias Brunner
265 1 Andreas Steffen
--enable-imc-scanner
266 1 Andreas Steffen
267 19 Tobias Brunner
p((. enable IMC port scanner module [ _no_ ].
268 13 Andreas Steffen
269 30 Tobias Brunner
--enable-imc-swid
270 30 Tobias Brunner
271 43 Tobias Brunner
p((. enable IMC swid module [ _no_ ]. Since version:5.1.1.
272 30 Tobias Brunner
273 1 Andreas Steffen
--enable-imc-test
274 13 Andreas Steffen
275 19 Tobias Brunner
p((. enable IMC test module [ _no_ ].
276 12 Andreas Steffen
277 19 Tobias Brunner
--enable-imv-attestation
278 19 Tobias Brunner
279 19 Tobias Brunner
p((. enable IMV attestation module [ _no_ ].
280 41 Tobias Brunner
281 41 Tobias Brunner
--enable-imv-hcd
282 41 Tobias Brunner
283 41 Tobias Brunner
p((. enable [[HCD-IMV|IMV hcd]] module [ _no_ ]. Since version:5.3.3.
284 1 Andreas Steffen
285 23 Tobias Brunner
--enable-imv-os
286 23 Tobias Brunner
287 23 Tobias Brunner
p((. enable IMV operating system module [ _no_ ].
288 23 Tobias Brunner
289 13 Andreas Steffen
--enable-imv-scanner
290 13 Andreas Steffen
291 19 Tobias Brunner
p((. enable IMV port scanner module [ _no_ ].
292 30 Tobias Brunner
293 30 Tobias Brunner
--enable-imv-swid
294 30 Tobias Brunner
295 43 Tobias Brunner
p((. enable IMV swid module [ _no_ ]. Since version:5.1.1.
296 1 Andreas Steffen
297 12 Andreas Steffen
--enable-imv-test
298 12 Andreas Steffen
299 19 Tobias Brunner
p((. enable IMV test module [ _no_ ].
300 12 Andreas Steffen
301 1 Andreas Steffen
--enable-integrity-test
302 1 Andreas Steffen
303 24 Tobias Brunner
p((. enable [[IntegrityTest|integrity testing]] of the daemon, libraries and loaded plugins [ _no_ ].
304 24 Tobias Brunner
305 24 Tobias Brunner
--enable-ipseckey
306 24 Tobias Brunner
307 43 Tobias Brunner
p((. enable IPSECKEY authentication plugin, which authenticates peers based on IPSECKEY resource records in the DNS protected by DNSSEC [ _no_ ]. Since version:5.0.3.
308 1 Andreas Steffen
309 35 Tobias Brunner
--enable-kernel-iph
310 1 Andreas Steffen
311 43 Tobias Brunner
p((. enable the [[Kernel-iph|Windows IP Helper based networking backend]] [ _no_ ]. Since version:5.2.0.
312 1 Andreas Steffen
313 28 Tobias Brunner
--enable-kernel-libipsec
314 28 Tobias Brunner
315 43 Tobias Brunner
p((. enable the [[kernel-libipsec|libipsec-based user-space "kernel" interface]] [ _no_ ]. Since version:5.1.0.
316 28 Tobias Brunner
317 1 Andreas Steffen
--enable-kernel-pfkey
318 1 Andreas Steffen
319 19 Tobias Brunner
p((. enable the PF_KEYv2 NETKEY kernel interface [ _no_ ].
320 1 Andreas Steffen
321 1 Andreas Steffen
--enable-kernel-pfroute
322 1 Andreas Steffen
323 1 Andreas Steffen
p((. enable the PF_ROUTE kernel interface [ _no_ ]. Required for FreeBSD and Mac OS X.
324 1 Andreas Steffen
325 35 Tobias Brunner
--enable-kernel-wfp
326 35 Tobias Brunner
327 43 Tobias Brunner
p((. enable the [[Kernel-wfp|Windows Filtering Platform IPsec backend]] [ _no_ ]. Since version:5.2.0.
328 35 Tobias Brunner
329 28 Tobias Brunner
--enable-keychain
330 28 Tobias Brunner
331 43 Tobias Brunner
p((. enable Mac OS X Keychain Services credential set [ _no_ ]. Since version:5.1.0.
332 28 Tobias Brunner
333 22 Tobias Brunner
--enable-libipsec
334 22 Tobias Brunner
335 22 Tobias Brunner
p((. enable user space IPsec implementation [ _no_ ].
336 22 Tobias Brunner
337 1 Andreas Steffen
--enable-ldap
338 1 Andreas Steffen
339 1 Andreas Steffen
p((. enable LDAP fetcher to fetch files (CRLs) from an LDAP server [ _no_ ]. Requires OpenLDAP.
340 1 Andreas Steffen
341 1 Andreas Steffen
--enable-leak-detective
342 1 Andreas Steffen
343 1 Andreas Steffen
p((. enable malloc hooks to find memory leaks [ _no_ ].
344 5 Andreas Steffen
345 5 Andreas Steffen
--enable-led
346 5 Andreas Steffen
347 19 Tobias Brunner
p((. enable plugin to control LEDs on IKEv2 activity using the Linux kernel LED subsystem [ _no_ ].
348 1 Andreas Steffen
349 1 Andreas Steffen
--enable-load-tester
350 1 Andreas Steffen
351 1 Andreas Steffen
p((. enable load testing plugin for IKEv2 daemon [ _no_ ].
352 1 Andreas Steffen
353 1 Andreas Steffen
--enable-lock-profiler
354 1 Andreas Steffen
355 1 Andreas Steffen
p((. enable lock/mutex profiling code [ _no_ ].
356 1 Andreas Steffen
357 44 Tobias Brunner
--enable-log-thread-ids
358 44 Tobias Brunner
359 44 Tobias Brunner
p((. use thread ID, if available, instead of an incremented value starting from 1, to identify threads [ _no_ ]. Since version:5.4.0.
360 44 Tobias Brunner
361 23 Tobias Brunner
--enable-lookip
362 23 Tobias Brunner
363 23 Tobias Brunner
p((. enable fast virtual IP [[lookip|lookup and notification plugin]] [ _no_ ].
364 23 Tobias Brunner
365 16 Tobias Brunner
--enable-maemo
366 1 Andreas Steffen
367 16 Tobias Brunner
p((. enable the Maemo specific plugin [ _no_ ].
368 16 Tobias Brunner
369 1 Andreas Steffen
--enable-manager
370 1 Andreas Steffen
371 1 Andreas Steffen
p((. build the strongSwan manager web application [ _no_ ]. See [[Manager]].
372 1 Andreas Steffen
373 16 Tobias Brunner
--enable-md4
374 16 Tobias Brunner
375 16 Tobias Brunner
p((. enable MD4 software implementation plugin. Required for eap-mschapv2 plugin [ _no_ ].
376 1 Andreas Steffen
377 1 Andreas Steffen
--enable-medcli
378 1 Andreas Steffen
379 1 Andreas Steffen
p((. enable mediation client web front end and daemon plugin [ _no_ ].
380 1 Andreas Steffen
381 1 Andreas Steffen
--enable-mediation
382 1 Andreas Steffen
383 1 Andreas Steffen
p((. enable IKEv2 Mediation Extension [ _no_ ].
384 1 Andreas Steffen
385 1 Andreas Steffen
--enable-medsrv
386 1 Andreas Steffen
387 1 Andreas Steffen
p((. enable mediation server web front end and daemon plugin [ _no_ ].
388 1 Andreas Steffen
389 1 Andreas Steffen
--enable-monolithic
390 1 Andreas Steffen
391 19 Tobias Brunner
p((. build monolithic versions of libstrongswan, libhydra, and libcharon that include all enabled plugins [ _no_ ].
392 1 Andreas Steffen
393 1 Andreas Steffen
--enable-mysql
394 1 Andreas Steffen
395 1 Andreas Steffen
p((. enable MySQL database support [ _no_ ]. Requires libmysqlclient_r.
396 19 Tobias Brunner
397 1 Andreas Steffen
--enable-nm
398 1 Andreas Steffen
399 20 Tobias Brunner
p((. enable the [[NetworkManager]] backend [ _no_ ].
400 1 Andreas Steffen
401 31 Andreas Steffen
--enable-ntru
402 31 Andreas Steffen
403 43 Tobias Brunner
p((. enable the NTRUEncrypt key exchange plugin [ _no_ ]. Since version:5.1.2
404 31 Andreas Steffen
405 1 Andreas Steffen
--enable-openssl
406 1 Andreas Steffen
407 1 Andreas Steffen
p((. enable the OpenSSL crypto plugin [ _no_ ]. Requires libcrypto.so.0.9.8.
408 1 Andreas Steffen
409 28 Tobias Brunner
--enable-osx-attr
410 28 Tobias Brunner
411 43 Tobias Brunner
p((. enable Mac OS X SystemConfiguration attribute handler [ _no_ ]. Since version:5.1.0.
412 28 Tobias Brunner
413 44 Tobias Brunner
--enable-p-cscf
414 44 Tobias Brunner
415 44 Tobias Brunner
p((. enable plugin to request P-CSCF server addresses from an ePDG (RFC 7651) [ _no_ ]. Since version:5.4.0.
416 44 Tobias Brunner
417 1 Andreas Steffen
--enable-padlock
418 1 Andreas Steffen
419 1 Andreas Steffen
p((. enable the padlock crypto plugin [ _no_ ]. Requires a VIA Padlock crypto engine.
420 19 Tobias Brunner
421 44 Tobias Brunner
--enable-perl-cpan
422 44 Tobias Brunner
423 44 Tobias Brunner
p((. enable build of provided perl CPAN modules (such as that for the [[vici]] protocol) [ _no_ ]. Since version:5.4.0.
424 44 Tobias Brunner
425 44 Tobias Brunner
--enable-perl-cpan-install
426 44 Tobias Brunner
427 44 Tobias Brunner
p((. enable installation of provided CPAN modules [ _no_ ]. Since version:5.4.0.
428 44 Tobias Brunner
429 1 Andreas Steffen
--enable-pkcs11
430 1 Andreas Steffen
431 1 Andreas Steffen
p((. enable the [[SmartcardsIKEv2|PKCS#11 crypto token]] support plugin [ _no_ ].
432 39 Tobias Brunner
433 39 Tobias Brunner
--enable-python-eggs
434 1 Andreas Steffen
435 40 Tobias Brunner
p((. enable build of provided python eggs (such as that for the [[vici]] protocol) [ _no_ ]. Since version:5.3.0.
436 1 Andreas Steffen
437 40 Tobias Brunner
--enable-python-eggs-install
438 40 Tobias Brunner
439 40 Tobias Brunner
p((. enable local installation of provided python eggs [ _no_ ]. Since version:5.3.1.
440 40 Tobias Brunner
441 23 Tobias Brunner
--enable-rdrand
442 23 Tobias Brunner
443 23 Tobias Brunner
p((. enable the Intel RDRAND random generator plugin [ _no_ ].
444 37 Tobias Brunner
445 1 Andreas Steffen
--enable-ruby-gems
446 1 Andreas Steffen
447 40 Tobias Brunner
p((. enable build of provided ruby gems (such as that for the [[vici]] protocol) [ _no_ ]. Since version:5.2.1.
448 40 Tobias Brunner
449 40 Tobias Brunner
--enable-ruby-gems-install
450 40 Tobias Brunner
451 40 Tobias Brunner
p((. enable local installation of provided ruby gems [ _no_ ]. Since version:5.3.1.
452 37 Tobias Brunner
453 42 Tobias Brunner
--enable-sha3
454 42 Tobias Brunner
455 42 Tobias Brunner
p((. enable SHA3_224/SHA3_256/SHA3_384/SHA3_512 software implementation plugin [ _no_ ]. Since version:5.3.4.
456 42 Tobias Brunner
457 1 Andreas Steffen
--enable-smp
458 1 Andreas Steffen
459 1 Andreas Steffen
p((. enable XML configuration and control interface [ _no_ ]. Requires libxml. See [[SMP]].
460 1 Andreas Steffen
461 1 Andreas Steffen
--enable-socket-dynamic
462 1 Andreas Steffen
463 1 Andreas Steffen
p((. enable dynamic socket implementation for charon [ _no_ ].
464 1 Andreas Steffen
465 35 Tobias Brunner
--enable-socket-win
466 35 Tobias Brunner
467 43 Tobias Brunner
p((. enable [[Socket-win|Winsock2 based socket implementation]] for charon [ _no_ ]. Since version:5.2.0.
468 35 Tobias Brunner
469 1 Andreas Steffen
--enable-soup
470 1 Andreas Steffen
471 1 Andreas Steffen
p((. enable soup fetcher plugin to fetch from HTTP URIs. [ _no_ ]. Requires libsoup.
472 16 Tobias Brunner
473 16 Tobias Brunner
--enable-sql
474 16 Tobias Brunner
475 1 Andreas Steffen
p((. enable SQL database configuration backend [ _no_ ]. See [[SQL]].
476 1 Andreas Steffen
477 35 Tobias Brunner
--enable-sqlite
478 35 Tobias Brunner
479 43 Tobias Brunner
p((. enable SQLite database support [ _no_ ]. Requires libsqlite3.
480 35 Tobias Brunner
481 35 Tobias Brunner
--enable-svc
482 35 Tobias Brunner
483 43 Tobias Brunner
p((. enable [[Charon-svc|charon Windows service]] [ _no_ ]. Since version:5.2.0.
484 35 Tobias Brunner
485 37 Tobias Brunner
--enable-systemd
486 37 Tobias Brunner
487 37 Tobias Brunner
p((. enable systemd specific IKE daemon charon-systemd [ _no_ ]. Since version:5.2.1.
488 37 Tobias Brunner
489 24 Tobias Brunner
--enable-systime-fix
490 24 Tobias Brunner
491 43 Tobias Brunner
p((. enable plugin to handle cert lifetimes with invalid system time gracefully [ _no_ ]. See [[SystimeFixPlugin]]. Since version:5.0.3.
492 24 Tobias Brunner
493 16 Tobias Brunner
--enable-test-vectors
494 16 Tobias Brunner
495 1 Andreas Steffen
p((. enable [[CryptoTest|crypto test]] vectors plugin [ _no_ ].
496 16 Tobias Brunner
497 24 Tobias Brunner
--enable-tkm
498 24 Tobias Brunner
499 43 Tobias Brunner
p((. enable _charon-tkm_ an IKEv2 daemon that is backed by a Trusted Key Manager (TKM) [ _no_ ]. More information can be found on http://www.codelabs.ch/tkm/. Since version:5.0.3.
500 24 Tobias Brunner
501 1 Andreas Steffen
--enable-tnccs-11
502 1 Andreas Steffen
503 1 Andreas Steffen
p((. enable TNCCS 1.1 protocol module [ _no_ ]. Requires libxml2.
504 1 Andreas Steffen
505 1 Andreas Steffen
--enable-tnccs-20
506 1 Andreas Steffen
507 8 Andreas Steffen
p((. enable TNCCS 2.0 protocol module [ _no_ ].
508 6 Andreas Steffen
509 1 Andreas Steffen
--enable-tnccs-dynamic
510 1 Andreas Steffen
511 1 Andreas Steffen
p((. enable dynamic TNCCS protocol discovery module [ _no_ ].
512 1 Andreas Steffen
513 19 Tobias Brunner
--enable-tnc-ifmap
514 19 Tobias Brunner
515 19 Tobias Brunner
p((. enable TNC IF-MAP module [ _no_ ].
516 19 Tobias Brunner
517 4 Andreas Steffen
--enable-tnc-imc
518 4 Andreas Steffen
519 4 Andreas Steffen
p((. enable TNC IMC integrity measurement collector module [ _no_ ].
520 4 Andreas Steffen
521 4 Andreas Steffen
-enable-tnc-imv
522 1 Andreas Steffen
523 1 Andreas Steffen
p((. enable TNC IMV integrity measurement verifier module [ _no_ ].
524 1 Andreas Steffen
525 1 Andreas Steffen
--enable-uci
526 1 Andreas Steffen
527 1 Andreas Steffen
p((. enable the OpenWRT UCI configuration plugin [ _no_ ].
528 1 Andreas Steffen
529 28 Tobias Brunner
--enable-unbound
530 28 Tobias Brunner
531 28 Tobias Brunner
p((. DNSSEC-enabled resolver plugin based on libunbound [ _no_ ].
532 28 Tobias Brunner
533 1 Andreas Steffen
--enable-unity
534 1 Andreas Steffen
535 43 Tobias Brunner
p((. enable Cisco Unity extension plugin [ _no_ ].
536 1 Andreas Steffen
537 35 Tobias Brunner
--enable-unwind-backtraces
538 35 Tobias Brunner
539 43 Tobias Brunner
p((. use libunwind to create backtraces for memory leaks and segfaults [ _no_ ]. Since version:5.1.0.
540 35 Tobias Brunner
541 18 Tobias Brunner
--enable-whitelist
542 1 Andreas Steffen
543 1 Andreas Steffen
p((. enable peer identity whitelisting plugin [ _no_ ]. 
544 1 Andreas Steffen
545 35 Tobias Brunner
--enable-winhttp
546 35 Tobias Brunner
547 43 Tobias Brunner
p((. enable [[Winhttp|WinHTTP based HTTP/HTTPS fetching plugin]]. [ _no_ ]. Since version:5.2.0.
548 35 Tobias Brunner
549 1 Andreas Steffen
--enable-xauth-eap
550 1 Andreas Steffen
551 19 Tobias Brunner
p((. enable XAuth backend using EAP methods to verify password [ _no_ ].
552 24 Tobias Brunner
553 24 Tobias Brunner
--enable-xauth-noauth
554 24 Tobias Brunner
555 43 Tobias Brunner
p((. enable XAuth pseudo-backend that does not actually verify or even request any credentials [ _no_ ]. Since version:5.0.3.
556 1 Andreas Steffen
557 22 Tobias Brunner
--enable-xauth-pam
558 22 Tobias Brunner
559 22 Tobias Brunner
p((. enable [[XAuthPam|XAuth backend using PAM]] to verify passwords [ _no_ ].
560 22 Tobias Brunner
561 1 Andreas Steffen
h2. --disable options
562 19 Tobias Brunner
563 19 Tobias Brunner
*The [[pluginlist|plugin list]] provides more information on specific plugins.*
564 19 Tobias Brunner
565 19 Tobias Brunner
--disable-aes
566 1 Andreas Steffen
567 1 Andreas Steffen
p((. disable default AES software implementation plugin [ _no_ ].
568 1 Andreas Steffen
569 1 Andreas Steffen
--disable-attr
570 1 Andreas Steffen
571 1 Andreas Steffen
p((. disable strongswan.conf based configuration of DNS and WINS server attributes [ _no_ ].
572 1 Andreas Steffen
 This is a plugin for VPN gateways only, serving internal DNS and WINS nameserver information.
573 1 Andreas Steffen
574 1 Andreas Steffen
--disable-charon
575 1 Andreas Steffen
576 20 Tobias Brunner
p((. disable the build of the IKEv1/IKEv2 keying daemon charon [ _no_ ].
577 7 Andreas Steffen
578 21 Tobias Brunner
--disable-cmac
579 21 Tobias Brunner
580 21 Tobias Brunner
p((. disable CMAC crypto implementation plugin [ _no_ ].
581 21 Tobias Brunner
582 7 Andreas Steffen
--disable-constraints
583 7 Andreas Steffen
584 7 Andreas Steffen
p((. disable advanced X.509 constraint checking plugin [ _no_ ].
585 1 Andreas Steffen
586 26 Tobias Brunner
--disable-defaults
587 26 Tobias Brunner
588 43 Tobias Brunner
p((. disable all features that are enabled by default [ _no_ ]. Basically it's short for adding all options listed in this section. Since version:5.0.3.
589 26 Tobias Brunner
590 1 Andreas Steffen
--disable-des
591 1 Andreas Steffen
592 1 Andreas Steffen
p((. disable default DES/3DES software implementation plugin [ _no_ ].
593 1 Andreas Steffen
594 1 Andreas Steffen
--disable-dnskey
595 1 Andreas Steffen
596 1 Andreas Steffen
p((. disable DNS RR key decoding plugin [ _no_ ].
597 1 Andreas Steffen
598 1 Andreas Steffen
--disable-fips-prf
599 1 Andreas Steffen
600 1 Andreas Steffen
p((. disable default FIPS PRF software implementation plugin [ _no_ ].
601 1 Andreas Steffen
602 1 Andreas Steffen
--disable-gmp
603 1 Andreas Steffen
604 1 Andreas Steffen
p((. disable default GNU Multi Precision (libgmp) based public key cryptography implementation plugin [ _no_ ].
605 1 Andreas Steffen
606 1 Andreas Steffen
--disable-hmac
607 1 Andreas Steffen
608 1 Andreas Steffen
p((. disable default HMAC crypto implementation plugin [ _no_ ].
609 1 Andreas Steffen
610 20 Tobias Brunner
--disable-ikev1
611 20 Tobias Brunner
612 20 Tobias Brunner
p((. disable IKEv1 protocol support in charon [ _no_ ].
613 20 Tobias Brunner
614 20 Tobias Brunner
--disable-ikev2
615 20 Tobias Brunner
616 20 Tobias Brunner
p((. disable IKEv2 protocol support in charon [ _no_ ].
617 20 Tobias Brunner
618 1 Andreas Steffen
--disable-kernel-netlink
619 1 Andreas Steffen
620 1 Andreas Steffen
p((. disable default Netlink kernel interface [ _no_ ].
621 1 Andreas Steffen
622 1 Andreas Steffen
--disable-load-warning
623 1 Andreas Steffen
624 20 Tobias Brunner
p((. disable the charon plugin load option warning in starter [ _no_ ]
625 16 Tobias Brunner
626 16 Tobias Brunner
--disable-md5
627 16 Tobias Brunner
628 16 Tobias Brunner
p((. disable default MD5 software implementation plugin [ _no_ ].
629 1 Andreas Steffen
630 20 Tobias Brunner
--disable-nonce
631 20 Tobias Brunner
632 20 Tobias Brunner
p((. disable nonce generation plugin [ _no_ ].
633 20 Tobias Brunner
634 1 Andreas Steffen
--disable-pem
635 1 Andreas Steffen
636 1 Andreas Steffen
p((. disable PEM decoding plugin [ _no_ ].
637 1 Andreas Steffen
638 1 Andreas Steffen
--disable-pgp
639 19 Tobias Brunner
640 1 Andreas Steffen
p((. disable PGP key decoding plugin [ _no_ ].
641 19 Tobias Brunner
642 19 Tobias Brunner
--disable-pkcs1
643 19 Tobias Brunner
644 19 Tobias Brunner
p((. disable PKCS#1 key decoding plugin [ _no_ ].
645 1 Andreas Steffen
646 23 Tobias Brunner
--disable-pkcs7
647 23 Tobias Brunner
648 23 Tobias Brunner
p((. disable PKCS#7 container support plugin [ _no_ ].
649 23 Tobias Brunner
650 1 Andreas Steffen
--disable-pkcs8
651 1 Andreas Steffen
652 1 Andreas Steffen
p((. disable PKCS#8 private key decoding plugin [ _no_ ].
653 1 Andreas Steffen
654 28 Tobias Brunner
--disable-pkcs12
655 28 Tobias Brunner
656 43 Tobias Brunner
p((. disable PKCS#12 container support plugin [ _no_ ]. Since version:5.1.0.
657 1 Andreas Steffen
658 35 Tobias Brunner
--disable-pki
659 35 Tobias Brunner
660 43 Tobias Brunner
p((. disable [[ipsecpki|pki]] certificate utility [ _no_ ]. Separate option since version:5.2.0, was included in _--disable-tools_ before.
661 35 Tobias Brunner
662 1 Andreas Steffen
--disable-pubkey
663 1 Andreas Steffen
664 1 Andreas Steffen
p((. disable default RAW public key support plugin [ _no_ ].
665 1 Andreas Steffen
666 1 Andreas Steffen
--disable-random
667 1 Andreas Steffen
668 1 Andreas Steffen
p((. disable default RNG implementation using the raw /dev/(u)random devices [ _no_ ].
669 1 Andreas Steffen
670 28 Tobias Brunner
--disable-rc2
671 28 Tobias Brunner
672 43 Tobias Brunner
p((. disable RC2 software implementation plugin [ _no_ ]. Since version:5.1.0.
673 1 Andreas Steffen
674 1 Andreas Steffen
--disable-resolve
675 1 Andreas Steffen
676 1 Andreas Steffen
p((. disable writing DNS information received via configuration payload to /etc/resolv.conf [ _no_ ].
677 7 Andreas Steffen
 This is a plugin for VPN clients only.
678 1 Andreas Steffen
679 1 Andreas Steffen
--disable-revocation
680 1 Andreas Steffen
681 1 Andreas Steffen
p((. disable X.509 CRL/OCSP revocation check plugin [ _no_ ].
682 1 Andreas Steffen
683 36 Tobias Brunner
--disable-scepclient
684 36 Tobias Brunner
685 43 Tobias Brunner
p((. disable [[ScepClient|SCEP client]] tool [ _no_ ]. Separate option since version:5.2.0, was included in _--disable-tools_ before.
686 36 Tobias Brunner
687 1 Andreas Steffen
--disable-scripts
688 1 Andreas Steffen
689 1 Andreas Steffen
p((. disable the build of additional utilities (found in directory scripts) [ _no_ ].
690 1 Andreas Steffen
691 1 Andreas Steffen
--disable-sha1
692 1 Andreas Steffen
693 16 Tobias Brunner
p((. disable default SHA-1 software implementation plugin [ _no_ ].
694 19 Tobias Brunner
695 16 Tobias Brunner
--disable-sha2
696 1 Andreas Steffen
697 1 Andreas Steffen
p((. disable default SHA-256/SHA-384/SHA-512 software implementation plugin [ _no_ ].
698 1 Andreas Steffen
699 1 Andreas Steffen
--disable-socket-default
700 1 Andreas Steffen
701 28 Tobias Brunner
p((. disable default socket implementation for charon [ _no_ ].
702 28 Tobias Brunner
703 1 Andreas Steffen
--disable-sshkey
704 1 Andreas Steffen
705 1 Andreas Steffen
p((. disable SSH key decoding plugin [ _no_ ]. Since version:5.1.0.
706 1 Andreas Steffen
707 28 Tobias Brunner
--disable-stroke
708 28 Tobias Brunner
709 43 Tobias Brunner
p((. disable charon's stroke configuration backend [ _no_ ].
710 1 Andreas Steffen
711 44 Tobias Brunner
--disable-swanctl
712 44 Tobias Brunner
713 44 Tobias Brunner
p((. disable [[swanctl]] configuration and control tool [ _no_ ]. Since version:5.2.0, enabled since version:5.4.0.
714 44 Tobias Brunner
715 1 Andreas Steffen
--disable-updown
716 1 Andreas Steffen
717 35 Tobias Brunner
p((. disable updown firewall script plugin [ _no_ ].  
718 44 Tobias Brunner
719 44 Tobias Brunner
--disable-vici
720 44 Tobias Brunner
721 44 Tobias Brunner
p((. disable the [[Vici|Versatile IKE Configuration Interface]] plugin. [ _no_ ]. Since version:5.2.0, enabled since version:5.4.0.
722 1 Andreas Steffen
723 1 Andreas Steffen
--disable-x509
724 1 Andreas Steffen
725 19 Tobias Brunner
p((. disable default X.509 certificate implementation plugin [ _no_ ].
726 16 Tobias Brunner
727 20 Tobias Brunner
--disable-xauth-generic
728 16 Tobias Brunner
729 20 Tobias Brunner
p((. disable generic XAauth backend [ _no_ ].
730 1 Andreas Steffen
731 16 Tobias Brunner
--disable-xcbc
732 16 Tobias Brunner
733 16 Tobias Brunner
p((. disable default XCBC crypto implementation plugin [ _no_ ].
734 1 Andreas Steffen
735 1 Andreas Steffen
h2. --with options
736 1 Andreas Steffen
737 1 Andreas Steffen
--with-capabilities=LIBCAP
738 1 Andreas Steffen
739 1 Andreas Steffen
p((. set capability dropping library. Currently supported values are _libcap_ and _native_ [ _no_ ].
740 22 Tobias Brunner
741 22 Tobias Brunner
--with-charon-udp-port=PORT
742 22 Tobias Brunner
743 22 Tobias Brunner
p((. UDP port used by charon locally. Set to 0 to allocate randomly. [ _500_ ]
744 22 Tobias Brunner
745 22 Tobias Brunner
--with-charon-natt-port=PORT
746 22 Tobias Brunner
747 22 Tobias Brunner
p((. UDP port used by charon locally in case a NAT is detected (must be different from charon-udp-port). Set to 0 to allocate randomly. [ _4500_ ]
748 22 Tobias Brunner
749 22 Tobias Brunner
--with-dev-headers=DIR
750 22 Tobias Brunner
751 22 Tobias Brunner
p((. install strongSwan development headers to DIR [ _no_ ].
752 19 Tobias Brunner
753 27 Tobias Brunner
--with-fips-mode=MODE
754 27 Tobias Brunner
755 27 Tobias Brunner
p((. set OpenSSL FIPS mode: disabled (0), enabled (1), Suite B enabled (2) [ _0_ ].
756 27 Tobias Brunner
757 1 Andreas Steffen
--with-group=GROUP
758 16 Tobias Brunner
759 19 Tobias Brunner
p((. [[ReducedPrivileges|change group]] of the daemons to GROUP after startup [ _root_ ].
760 1 Andreas Steffen
761 1 Andreas Steffen
--with-imcvdir=IMCVDIR
762 1 Andreas Steffen
763 1 Andreas Steffen
p((. set the installation path of IMC and IMV dynamic libraries [ _IPSECLIBDIR/imcvs_ ].
764 1 Andreas Steffen
765 1 Andreas Steffen
--with-ipsecdir=IPSECDIR
766 16 Tobias Brunner
767 1 Andreas Steffen
p((. installation path for ipsec tools [ _LIBEXECDIR/ipsec_ ].
768 1 Andreas Steffen
769 1 Andreas Steffen
--with-ipseclibdir=IPSECLIBDIR
770 1 Andreas Steffen
771 1 Andreas Steffen
p((. installation path for ipsec libraries (libstrongswan, libhydra, libcharon etc.) [ _LIBDIR/ipsec_ ].
772 1 Andreas Steffen
773 20 Tobias Brunner
--with-ipsec-script=SCRIPTNAME
774 20 Tobias Brunner
775 20 Tobias Brunner
p((. change the name of the ipsec script [ _ipsec_].
776 20 Tobias Brunner
777 1 Andreas Steffen
--with-linux-headers=DIR
778 16 Tobias Brunner
779 1 Andreas Steffen
p((. linux header files to be used [ _../include_ ].
780 1 Andreas Steffen
781 19 Tobias Brunner
--with-mpz_powm_sec=YES|NO
782 19 Tobias Brunner
783 19 Tobias Brunner
p((. use the more side-channel resistant mpz_powm_sec in libgmp, if available [ _yes_ ].
784 19 Tobias Brunner
785 16 Tobias Brunner
--with-nm-ca-dir=NMCADIR
786 16 Tobias Brunner
787 20 Tobias Brunner
p((. directory the NM backend uses to look up trusted root certificates [ _/usr/share/ca-certificates_ ].
788 16 Tobias Brunner
789 1 Andreas Steffen
--with-piddir=DIR
790 1 Andreas Steffen
791 1 Andreas Steffen
p((. path for PID and UNIX socket files [ _/var/run_ ].
792 1 Andreas Steffen
793 1 Andreas Steffen
--with-plugindir=PLUGINDIR
794 1 Andreas Steffen
795 1 Andreas Steffen
p((. installation path for plugins [ _IPSECLIBDIR/plugins_ ].
796 1 Andreas Steffen
797 1 Andreas Steffen
--with-printf-hooks=IMPL
798 1 Andreas Steffen
799 43 Tobias Brunner
p((. force the use of a specific printf()-hook implementation (auto, builtin, glibc, vstr) [ _auto_ ], since version:5.1.3.
800 39 Tobias Brunner
801 39 Tobias Brunner
--with-pythoneggdir=arg
802 39 Tobias Brunner
803 39 Tobias Brunner
p((. path to install python eggs to [ _site-packages directory_ ]. Since version:5.3.0.
804 16 Tobias Brunner
805 1 Andreas Steffen
--with-random-device=DEV
806 1 Andreas Steffen
807 16 Tobias Brunner
p((. set the device for true random data [ _/dev/random_ ].
808 1 Andreas Steffen
809 1 Andreas Steffen
--with-resolv-conf=FILE
810 1 Andreas Steffen
811 19 Tobias Brunner
p((. set the file to store DNS server information [ _SYSCONFDIR/resolv.conf_ ].
812 1 Andreas Steffen
813 1 Andreas Steffen
--with-routing-table=NUM
814 1 Andreas Steffen
815 1 Andreas Steffen
p((. routing table for IPsec source routes (set to 0 to use default routing table) [ _220_ ].
816 1 Andreas Steffen
817 19 Tobias Brunner
--with-routing-table-prio=PRIO
818 19 Tobias Brunner
819 19 Tobias Brunner
p((. priority for IPsec routing table [ _220_ ].
820 37 Tobias Brunner
821 37 Tobias Brunner
--with-rubygemdir=arg
822 37 Tobias Brunner
823 37 Tobias Brunner
p((. path to install ruby gems to [ _gem environment gemdir_ ]. Since version:5.2.1.
824 19 Tobias Brunner
825 19 Tobias Brunner
--with-strongswan-conf=FILE
826 19 Tobias Brunner
827 19 Tobias Brunner
p((. set the strongswan.conf file location [ _SYSCONFDIR/strongswan.conf_ ].
828 19 Tobias Brunner
829 1 Andreas Steffen
--with-systemdsystemunitdir=arg
830 1 Andreas Steffen
831 1 Andreas Steffen
p((. directory for systemd service files [ _$systemdsystemunitdir_default_ ].
832 35 Tobias Brunner
833 35 Tobias Brunner
--with-swanctldir=arg
834 35 Tobias Brunner
835 43 Tobias Brunner
p((. base directory for [[swanctl]] configuration files and credentials [ _SYSCONFDIR/swanctl_ ]. Since version:5.2.0.
836 23 Tobias Brunner
837 23 Tobias Brunner
--with-tss=TSS
838 23 Tobias Brunner
839 23 Tobias Brunner
p((. set implementation of the Trusted Computing Group's Software Stack (TSS). Currently the only supported value is "trousers".
840 1 Andreas Steffen
841 1 Andreas Steffen
--with-urandom-device=DEV
842 1 Andreas Steffen
843 1 Andreas Steffen
p((. set the device for pseudo random data [ _/dev/urandom_ ].
844 1 Andreas Steffen
845 1 Andreas Steffen
--with-user=USER
846 1 Andreas Steffen
847 19 Tobias Brunner
p((. [[nonRoot|change user]] of the daemons to USER after startup [ _root_ ].