Project

General

Profile

Autoconf options for the most current strongSwan release » History » Version 60

Tobias Brunner, 24.07.2020 15:38
Updated for 5.9.0

1 28 Tobias Brunner
h1. Autoconf options for the most current strongSwan release
2 1 Andreas Steffen
3 2 Andreas Steffen
{{>toc}}
4 2 Andreas Steffen
5 19 Tobias Brunner
bq. *Please note:* This page documents the _./configure_ options for the most current release. Therefore, you should always use _./configure --help_ to check which options are actually available for the release you are using.
6 1 Andreas Steffen
7 1 Andreas Steffen
h2. --dir options
8 1 Andreas Steffen
9 19 Tobias Brunner
*Some directories can be configure through [[Autoconf#--with-options|--with options]].*
10 19 Tobias Brunner
11 1 Andreas Steffen
--prefix=PREFIX
12 1 Andreas Steffen
13 1 Andreas Steffen
p((. where to put installation [ _/usr/local_ ]. Most Linux distributions use _"/usr"_.
14 1 Andreas Steffen
15 1 Andreas Steffen
--libexecdir=LIBEXECDIR
16 1 Andreas Steffen
17 1 Andreas Steffen
p((. program executables [ _PREFIX/libexec_ ]
18 16 Tobias Brunner
19 16 Tobias Brunner
--libdir=LIBDIR
20 16 Tobias Brunner
21 16 Tobias Brunner
p((. shared libraries [ _PREFIX/lib_ ]
22 1 Andreas Steffen
 
23 1 Andreas Steffen
--sysconfdir=SYSCONFDIR
24 1 Andreas Steffen
25 1 Andreas Steffen
p((. where to put configuration files [ _PREFIX/etc_ ]. We strongly recommend _"/etc"_.
26 1 Andreas Steffen
27 17 Tobias Brunner
h2. --enable options
28 1 Andreas Steffen
29 17 Tobias Brunner
*The [[pluginlist|plugin list]] provides more information on specific plugins.*
30 17 Tobias Brunner
31 34 Tobias Brunner
--enable-acert
32 34 Tobias Brunner
33 43 Tobias Brunner
p((. enable X.509 attribute certificate checking plugin [ _no_ ]. Since version:5.1.3.
34 34 Tobias Brunner
35 1 Andreas Steffen
--enable-addrblock
36 1 Andreas Steffen
37 34 Tobias Brunner
p((. enable RFC 3779 address block constraint support plugin [ _no_ ].
38 1 Andreas Steffen
39 40 Tobias Brunner
--enable-aesni
40 40 Tobias Brunner
41 40 Tobias Brunner
p((. enable Intel AES-NI crypto plugin [ _no_ ]. Since version:5.3.1.
42 40 Tobias Brunner
43 6 Andreas Steffen
--enable-af-alg
44 6 Andreas Steffen
45 6 Andreas Steffen
p((. enable AF_ALG crypto interface to Linux Crypto API [ _no_ ]. 
46 6 Andreas Steffen
47 1 Andreas Steffen
--enable-agent
48 1 Andreas Steffen
49 6 Andreas Steffen
p((. enable the ssh-agent signing plugin [ _no_ ]. 
50 1 Andreas Steffen
51 35 Tobias Brunner
--enable-aikgen
52 35 Tobias Brunner
53 46 Tobias Brunner
p((. enable AIK generator for TPM 1.2 [ _no_ ]. Since version:5.2.0.
54 1 Andreas Steffen
55 34 Tobias Brunner
--enable-all
56 34 Tobias Brunner
57 43 Tobias Brunner
p((. enable all optional plugins and features (they can be disabled with their respective --disable options) [ _no_ ]. Mainly intended for testing. Since version:5.1.3.
58 34 Tobias Brunner
59 1 Andreas Steffen
--enable-android
60 1 Andreas Steffen
61 22 Tobias Brunner
p((. enable Android specific plugin [ _no_ ]. 
62 1 Andreas Steffen
63 22 Tobias Brunner
--enable-android-log
64 22 Tobias Brunner
65 22 Tobias Brunner
p((. enable Android specific logger plugin [ _no_ ].
66 22 Tobias Brunner
67 1 Andreas Steffen
--enable-attr-sql
68 1 Andreas Steffen
69 6 Andreas Steffen
p((. enable the SQL based configuration attribute plugin [ _no_ ]. 
70 1 Andreas Steffen
 This is a plugin for VPN gateways only, serving virtual IP addresses
71 1 Andreas Steffen
72 28 Tobias Brunner
--enable-bfd-backtraces
73 28 Tobias Brunner
74 43 Tobias Brunner
p((. use binutil's libbfd to resolve backtraces for memory leaks and segfaults [ _no_ ]. Since version:5.0.1.
75 28 Tobias Brunner
76 38 Tobias Brunner
--enable-bliss
77 38 Tobias Brunner
78 38 Tobias Brunner
p((. enable Bimodal Lattice Signature Scheme (BLISS) software implementation plugin [ _no_ ]. Since version:5.2.2.
79 38 Tobias Brunner
80 1 Andreas Steffen
--enable-blowfish
81 1 Andreas Steffen
82 1 Andreas Steffen
p((. enable Blowfish software implementation plugin [ _no_ ].
83 1 Andreas Steffen
84 55 Tobias Brunner
--enable-botan
85 55 Tobias Brunner
86 55 Tobias Brunner
p((. enable the Botan crypto plugin [ _no_ ]. Requires "Botan":https://botan.randombit.net/ 2.8.0 or newer. Since version:5.7.0.
87 55 Tobias Brunner
88 49 Tobias Brunner
--enable-bypass-lan
89 49 Tobias Brunner
90 49 Tobias Brunner
p((. enable plugin to automatically install bypass policies for local subnets. [ _no_ ]. Since version:5.5.2.
91 49 Tobias Brunner
92 49 Tobias Brunner
93 1 Andreas Steffen
--enable-ccm
94 1 Andreas Steffen
95 1 Andreas Steffen
p((. enable the CCM AEAD wrapper crypto plugin [ _no_ ].
96 1 Andreas Steffen
97 41 Tobias Brunner
--enable-chapoly
98 41 Tobias Brunner
99 41 Tobias Brunner
p((. enables the ChaCha20/Poly1305 AEAD plugin [ _no_ ]. Since version:5.3.3.
100 41 Tobias Brunner
101 19 Tobias Brunner
--enable-certexpire
102 19 Tobias Brunner
103 19 Tobias Brunner
p((. enable CSV export of expiration dates of used certificates [ _no_ ].
104 1 Andreas Steffen
105 28 Tobias Brunner
--enable-cmd
106 28 Tobias Brunner
107 43 Tobias Brunner
p((. enable the command line IKE client charon-cmd [ _no_ ]. Since version:5.1.0.
108 28 Tobias Brunner
109 6 Andreas Steffen
--enable-conftest
110 1 Andreas Steffen
111 33 Tobias Brunner
p((. enable the [[IpsecConftest|IKE conformance test framework]] [ _no_ ].
112 9 Andreas Steffen
113 39 Tobias Brunner
--enable-connmark
114 39 Tobias Brunner
115 39 Tobias Brunner
p((. enable [[connmark]] plugin, which enables conntrack based marks to select return path SA [ _no_ ]. Since version:5.3.0.
116 39 Tobias Brunner
117 53 Tobias Brunner
--enable-counters
118 53 Tobias Brunner
119 53 Tobias Brunner
p((. enable plugin that collects several performance counters [ _no_ ]. Since version:5.6.1.
120 53 Tobias Brunner
121 1 Andreas Steffen
--enable-coupling
122 1 Andreas Steffen
123 19 Tobias Brunner
p((. enable IKEv2 plugin to couple peer certificates permanently to authentication [ _no_ ].
124 1 Andreas Steffen
125 28 Tobias Brunner
--enable-coverage
126 28 Tobias Brunner
127 43 Tobias Brunner
p((. enable lcov coverage report report generation [ _no_ ]. Since version:5.1.0.
128 28 Tobias Brunner
*Note:* This disables any optimization, so it shouldn't be enabled when building production releases.
129 28 Tobias Brunner
130 1 Andreas Steffen
--enable-ctr
131 1 Andreas Steffen
132 1 Andreas Steffen
p((. enable the counter mode wrapper crypto plugin [ _no_ ].
133 16 Tobias Brunner
134 16 Tobias Brunner
--enable-curl
135 1 Andreas Steffen
136 16 Tobias Brunner
p((. enable plugin to fetch files (CRL/OCSP) via libcurl [ _no_ ]. Requires libcurl.
137 16 Tobias Brunner
138 35 Tobias Brunner
--enable-dbghelp-backtraces
139 35 Tobias Brunner
140 43 Tobias Brunner
p((. use dbghlp.dll on Windows to create and print backtraces for memory leaks and segfaults [ _no_ ]. Since version:5.2.0.
141 35 Tobias Brunner
142 1 Andreas Steffen
--enable-dhcp
143 1 Andreas Steffen
144 19 Tobias Brunner
p((. enable DHCP based attribute provider plugin. [ _no_ ].
145 1 Andreas Steffen
146 1 Andreas Steffen
--enable-dnscert
147 1 Andreas Steffen
148 1 Andreas Steffen
p((. enable plugin that authenticates peers based on CERT resource records in the DNS protected by DNSSEC [ _no_ ]. Since version:5.1.1.
149 1 Andreas Steffen
150 9 Andreas Steffen
--enable-duplicheck
151 9 Andreas Steffen
152 19 Tobias Brunner
p((. enable advanced duplicate checking plugin using liveness checks [ _no_ ].
153 1 Andreas Steffen
154 1 Andreas Steffen
--enable-eap-aka
155 1 Andreas Steffen
156 19 Tobias Brunner
p((. build EAP AKA authentication module [ _no_ ].
157 1 Andreas Steffen
158 52 Tobias Brunner
--enable-eap-aka-3gpp
159 52 Tobias Brunner
160 52 Tobias Brunner
p((. build EAP AKA backend module implementing 3GPP MILENAGE algorithms in software [ _no_ ]. Since version:5.6.0.
161 52 Tobias Brunner
162 1 Andreas Steffen
--enable-eap-aka-3gpp2
163 1 Andreas Steffen
164 52 Tobias Brunner
p((. build EAP AKA backend module implementing 3GPP2 algorithms in software [ _no_ ]. Requires libgmp.
165 1 Andreas Steffen
166 22 Tobias Brunner
--enable-eap-dynamic
167 22 Tobias Brunner
168 22 Tobias Brunner
p((. build dynamic EAP proxy module [ _no_ ].
169 22 Tobias Brunner
170 1 Andreas Steffen
--enable-eap-gtc
171 1 Andreas Steffen
172 22 Tobias Brunner
p((. build [[EapGtc|EAP GTC]] authentication module [ _no_ ].
173 1 Andreas Steffen
174 1 Andreas Steffen
--enable-eap-identity
175 1 Andreas Steffen
176 1 Andreas Steffen
p((. build EAP module providing EAP-Identity helper [ _no_ ].
177 1 Andreas Steffen
178 1 Andreas Steffen
--enable-eap-md5
179 1 Andreas Steffen
180 19 Tobias Brunner
p((. build EAP MD5 (CHAP) authentication module [ _no_ ].
181 1 Andreas Steffen
182 1 Andreas Steffen
--enable-eap-mschapv2
183 1 Andreas Steffen
184 19 Tobias Brunner
p((. enable EAP MS-CHAPv2 authentication module [ _no_ ].
185 10 Andreas Steffen
186 10 Andreas Steffen
--enable-eap-peap
187 1 Andreas Steffen
188 1 Andreas Steffen
p((. enable EAP PEAP authentication plugin [ _no_ ].
189 1 Andreas Steffen
190 1 Andreas Steffen
--enable-eap-radius
191 1 Andreas Steffen
192 19 Tobias Brunner
p((. enable [[EapRadius|RADIUS]] proxy authentication module for EAP [ _no_ ].
193 1 Andreas Steffen
194 1 Andreas Steffen
--enable-eap-sim
195 1 Andreas Steffen
196 19 Tobias Brunner
p((. enable EAP-SIM authentication module [ _no_ ].
197 1 Andreas Steffen
198 16 Tobias Brunner
--enable-eap-sim-file
199 11 Andreas Steffen
200 19 Tobias Brunner
p((. enable EAP-SIM back end based on a triplets file [ _no_ ].
201 11 Andreas Steffen
202 11 Andreas Steffen
--enable-eap-sim-pcsc
203 1 Andreas Steffen
204 19 Tobias Brunner
p((. enable EAP-SIM back end based on a smartcard reader [ _no_ ]. Requires libpcsclite.
205 1 Andreas Steffen
206 1 Andreas Steffen
--enable-eap-simaka-pseudonym
207 1 Andreas Steffen
208 1 Andreas Steffen
p((. enable EAP-SIM/AKA pseudonym storage [ _no_ ].
209 1 Andreas Steffen
210 1 Andreas Steffen
--enable-eap-simaka-reauth
211 1 Andreas Steffen
212 1 Andreas Steffen
p((. enable EAP-SIM/AKA reauthentication data storage [ _no_ ].
213 1 Andreas Steffen
214 1 Andreas Steffen
--enable-eap-simaka-sql
215 1 Andreas Steffen
216 19 Tobias Brunner
p((. enable EAP-SIM/AKA backend based on a triplet/quintuplet SQL database [ _no_ ].
217 1 Andreas Steffen
218 1 Andreas Steffen
--enable-eap-tls
219 1 Andreas Steffen
220 1 Andreas Steffen
p((. enable EAP TLS authentication plugin [ _no_ ].
221 1 Andreas Steffen
222 1 Andreas Steffen
--enable-eap-tnc
223 1 Andreas Steffen
224 1 Andreas Steffen
p((. enable EAP TNC trusted network connect plugin [ _no_ ].
225 1 Andreas Steffen
226 1 Andreas Steffen
--enable-eap-ttls
227 1 Andreas Steffen
228 1 Andreas Steffen
p((. enable EAP TTLS authentication plugin [ _no_ ].
229 1 Andreas Steffen
230 23 Tobias Brunner
--enable-error-notify
231 23 Tobias Brunner
232 23 Tobias Brunner
p((. enable [[ErrorNotifyPlugin|error notification plugin]] [ _no_ ].
233 23 Tobias Brunner
234 37 Tobias Brunner
--enable-ext-auth
235 37 Tobias Brunner
236 37 Tobias Brunner
p((. enable plugin calling an external authorization script [ _no_ ]. Since version:5.2.1.
237 37 Tobias Brunner
238 1 Andreas Steffen
--enable-farp
239 1 Andreas Steffen
240 19 Tobias Brunner
p((.  enable ARP faking plugin that responds to ARP requests for virtual IPs assigned to peers [ _no_ ].
241 1 Andreas Steffen
242 1 Andreas Steffen
--enable-fast
243 1 Andreas Steffen
244 19 Tobias Brunner
p((. build libfast (FastCGI Application Server w/ templates) [ _no_ ]. See [[libfast]].
245 1 Andreas Steffen
246 39 Tobias Brunner
--enable-files
247 39 Tobias Brunner
248 39 Tobias Brunner
p((. enable simple file:// URI fetcher [ _no_ ]. Since version:5.3.0.
249 39 Tobias Brunner
250 39 Tobias Brunner
--enable-forecast
251 39 Tobias Brunner
252 39 Tobias Brunner
p((. enable [[forecast]] plugin, which forwards broadcast/multicast messages [ _no_ ]. Since version:5.3.0.
253 39 Tobias Brunner
254 51 Tobias Brunner
--enable-fuzzing
255 51 Tobias Brunner
256 51 Tobias Brunner
p((. enable [[fuzzing]] scripts (found in directory fuzz and intended for use on the OSS-Fuzz infrastructure). [ _no_ ]. Since version:5.5.3.
257 51 Tobias Brunner
258 51 Tobias Brunner
259 1 Andreas Steffen
--enable-gcm
260 1 Andreas Steffen
261 1 Andreas Steffen
p((. enable the GCM AEAD wrapper crypto plugin [ _no_ ].
262 1 Andreas Steffen
263 1 Andreas Steffen
--enable-gcrypt
264 1 Andreas Steffen
265 1 Andreas Steffen
p((. enable the libgcrypt plugin [ _no_ ]. Requires the GNU Libgcrypt library.
266 1 Andreas Steffen
267 60 Tobias Brunner
--enable-git-version
268 60 Tobias Brunner
269 60 Tobias Brunner
p((. use output of @git describe@ as version information in executables [ _no_ ].
270 60 Tobias Brunner
271 1 Andreas Steffen
--enable-ha
272 1 Andreas Steffen
273 1 Andreas Steffen
p((. enable the [[HighAvailability|high availability]] cluster plugin [ _no_ ]. 
274 19 Tobias Brunner
275 19 Tobias Brunner
--enable-imc-attestation
276 1 Andreas Steffen
277 23 Tobias Brunner
p((. enable IMC attestation module [ _no_ ].
278 1 Andreas Steffen
279 41 Tobias Brunner
--enable-imc-hcd
280 41 Tobias Brunner
281 41 Tobias Brunner
p((. enable [[HCD-IMC|IMC hcd]] module [ _no_ ]. Since version:5.3.3.
282 41 Tobias Brunner
283 23 Tobias Brunner
--enable-imc-os
284 23 Tobias Brunner
285 23 Tobias Brunner
p((. enable IMC operating system module [ _no_ ].
286 23 Tobias Brunner
287 30 Tobias Brunner
--enable-imc-scanner
288 30 Tobias Brunner
289 43 Tobias Brunner
p((. enable IMC port scanner module [ _no_ ].
290 1 Andreas Steffen
291 52 Tobias Brunner
--enable-imc-swima
292 52 Tobias Brunner
293 52 Tobias Brunner
p((. enable IMC swima module [ _no_ ]. Since version:5.6.0.
294 52 Tobias Brunner
295 1 Andreas Steffen
--enable-imc-test
296 13 Andreas Steffen
297 19 Tobias Brunner
p((. enable IMC test module [ _no_ ].
298 12 Andreas Steffen
299 19 Tobias Brunner
--enable-imv-attestation
300 19 Tobias Brunner
301 19 Tobias Brunner
p((. enable IMV attestation module [ _no_ ].
302 41 Tobias Brunner
303 41 Tobias Brunner
--enable-imv-hcd
304 41 Tobias Brunner
305 41 Tobias Brunner
p((. enable [[HCD-IMV|IMV hcd]] module [ _no_ ]. Since version:5.3.3.
306 1 Andreas Steffen
307 23 Tobias Brunner
--enable-imv-os
308 23 Tobias Brunner
309 23 Tobias Brunner
p((. enable IMV operating system module [ _no_ ].
310 30 Tobias Brunner
311 30 Tobias Brunner
--enable-imv-scanner
312 30 Tobias Brunner
313 1 Andreas Steffen
p((. enable IMV port scanner module [ _no_ ].
314 52 Tobias Brunner
315 52 Tobias Brunner
--enable-imv-swima
316 52 Tobias Brunner
317 52 Tobias Brunner
p((. enable IMV swima module [ _no_ ]. Since version:5.6.0.
318 1 Andreas Steffen
319 12 Andreas Steffen
--enable-imv-test
320 12 Andreas Steffen
321 19 Tobias Brunner
p((. enable IMV test module [ _no_ ].
322 12 Andreas Steffen
323 1 Andreas Steffen
--enable-integrity-test
324 1 Andreas Steffen
325 24 Tobias Brunner
p((. enable [[IntegrityTest|integrity testing]] of the daemon, libraries and loaded plugins [ _no_ ].
326 24 Tobias Brunner
327 24 Tobias Brunner
--enable-ipseckey
328 24 Tobias Brunner
329 43 Tobias Brunner
p((. enable IPSECKEY authentication plugin, which authenticates peers based on IPSECKEY resource records in the DNS protected by DNSSEC [ _no_ ]. Since version:5.0.3.
330 1 Andreas Steffen
331 35 Tobias Brunner
--enable-kernel-iph
332 1 Andreas Steffen
333 43 Tobias Brunner
p((. enable the [[Kernel-iph|Windows IP Helper based networking backend]] [ _no_ ]. Since version:5.2.0.
334 1 Andreas Steffen
335 28 Tobias Brunner
--enable-kernel-libipsec
336 28 Tobias Brunner
337 43 Tobias Brunner
p((. enable the [[kernel-libipsec|libipsec-based user-space "kernel" interface]] [ _no_ ]. Since version:5.1.0.
338 28 Tobias Brunner
339 1 Andreas Steffen
--enable-kernel-pfkey
340 1 Andreas Steffen
341 19 Tobias Brunner
p((. enable the PF_KEYv2 NETKEY kernel interface [ _no_ ].
342 1 Andreas Steffen
343 1 Andreas Steffen
--enable-kernel-pfroute
344 1 Andreas Steffen
345 1 Andreas Steffen
p((. enable the PF_ROUTE kernel interface [ _no_ ]. Required for FreeBSD and Mac OS X.
346 1 Andreas Steffen
347 35 Tobias Brunner
--enable-kernel-wfp
348 35 Tobias Brunner
349 43 Tobias Brunner
p((. enable the [[Kernel-wfp|Windows Filtering Platform IPsec backend]] [ _no_ ]. Since version:5.2.0.
350 35 Tobias Brunner
351 28 Tobias Brunner
--enable-keychain
352 28 Tobias Brunner
353 43 Tobias Brunner
p((. enable Mac OS X Keychain Services credential set [ _no_ ]. Since version:5.1.0.
354 28 Tobias Brunner
355 22 Tobias Brunner
--enable-libipsec
356 22 Tobias Brunner
357 22 Tobias Brunner
p((. enable user space IPsec implementation [ _no_ ].
358 22 Tobias Brunner
359 1 Andreas Steffen
--enable-ldap
360 1 Andreas Steffen
361 1 Andreas Steffen
p((. enable LDAP fetcher to fetch files (CRLs) from an LDAP server [ _no_ ]. Requires OpenLDAP.
362 1 Andreas Steffen
363 1 Andreas Steffen
--enable-leak-detective
364 1 Andreas Steffen
365 1 Andreas Steffen
p((. enable malloc hooks to find memory leaks [ _no_ ].
366 5 Andreas Steffen
367 5 Andreas Steffen
--enable-led
368 5 Andreas Steffen
369 19 Tobias Brunner
p((. enable plugin to control LEDs on IKEv2 activity using the Linux kernel LED subsystem [ _no_ ].
370 1 Andreas Steffen
371 1 Andreas Steffen
--enable-load-tester
372 1 Andreas Steffen
373 1 Andreas Steffen
p((. enable load testing plugin for IKEv2 daemon [ _no_ ].
374 1 Andreas Steffen
375 1 Andreas Steffen
--enable-lock-profiler
376 1 Andreas Steffen
377 1 Andreas Steffen
p((. enable lock/mutex profiling code [ _no_ ].
378 1 Andreas Steffen
379 44 Tobias Brunner
--enable-log-thread-ids
380 44 Tobias Brunner
381 44 Tobias Brunner
p((. use thread ID, if available, instead of an incremented value starting from 1, to identify threads [ _no_ ]. Since version:5.4.0.
382 44 Tobias Brunner
383 23 Tobias Brunner
--enable-lookip
384 23 Tobias Brunner
385 23 Tobias Brunner
p((. enable fast virtual IP [[lookip|lookup and notification plugin]] [ _no_ ].
386 23 Tobias Brunner
387 1 Andreas Steffen
--enable-manager
388 1 Andreas Steffen
389 1 Andreas Steffen
p((. build the strongSwan manager web application [ _no_ ]. See [[Manager]].
390 1 Andreas Steffen
391 16 Tobias Brunner
--enable-md4
392 16 Tobias Brunner
393 16 Tobias Brunner
p((. enable MD4 software implementation plugin. Required for eap-mschapv2 plugin [ _no_ ].
394 1 Andreas Steffen
395 1 Andreas Steffen
--enable-medcli
396 1 Andreas Steffen
397 1 Andreas Steffen
p((. enable mediation client web front end and daemon plugin [ _no_ ].
398 1 Andreas Steffen
399 1 Andreas Steffen
--enable-mediation
400 1 Andreas Steffen
401 1 Andreas Steffen
p((. enable IKEv2 Mediation Extension [ _no_ ].
402 1 Andreas Steffen
403 1 Andreas Steffen
--enable-medsrv
404 1 Andreas Steffen
405 1 Andreas Steffen
p((. enable mediation server web front end and daemon plugin [ _no_ ].
406 48 Tobias Brunner
407 48 Tobias Brunner
--enable-mgf1
408 48 Tobias Brunner
409 48 Tobias Brunner
p((. enable the MGF1 software implementation plugin [ _no_ ]. Since version:5.5.1
410 1 Andreas Steffen
411 1 Andreas Steffen
--enable-monolithic
412 1 Andreas Steffen
413 19 Tobias Brunner
p((. build monolithic versions of libstrongswan, libhydra, and libcharon that include all enabled plugins [ _no_ ].
414 1 Andreas Steffen
415 1 Andreas Steffen
--enable-mysql
416 1 Andreas Steffen
417 1 Andreas Steffen
p((. enable MySQL database support [ _no_ ]. Requires libmysqlclient_r.
418 19 Tobias Brunner
419 47 Andreas Steffen
--enable-newhope
420 47 Andreas Steffen
421 47 Andreas Steffen
p((. enable the NewHope post-quantum key exchange plugin [ _no_ ]. Since version:5.5.1
422 47 Andreas Steffen
423 1 Andreas Steffen
--enable-nm
424 1 Andreas Steffen
425 20 Tobias Brunner
p((. enable the [[NetworkManager]] backend [ _no_ ].
426 1 Andreas Steffen
427 31 Andreas Steffen
--enable-ntru
428 31 Andreas Steffen
429 43 Tobias Brunner
p((. enable the NTRUEncrypt key exchange plugin [ _no_ ]. Since version:5.1.2
430 31 Andreas Steffen
431 1 Andreas Steffen
--enable-openssl
432 1 Andreas Steffen
433 1 Andreas Steffen
p((. enable the OpenSSL crypto plugin [ _no_ ]. Requires libcrypto.so.0.9.8.
434 1 Andreas Steffen
435 28 Tobias Brunner
--enable-osx-attr
436 28 Tobias Brunner
437 43 Tobias Brunner
p((. enable Mac OS X SystemConfiguration attribute handler [ _no_ ]. Since version:5.1.0.
438 28 Tobias Brunner
439 44 Tobias Brunner
--enable-p-cscf
440 44 Tobias Brunner
441 44 Tobias Brunner
p((. enable plugin to request P-CSCF server addresses from an ePDG (RFC 7651) [ _no_ ]. Since version:5.4.0.
442 44 Tobias Brunner
443 1 Andreas Steffen
--enable-padlock
444 1 Andreas Steffen
445 1 Andreas Steffen
p((. enable the padlock crypto plugin [ _no_ ]. Requires a VIA Padlock crypto engine.
446 19 Tobias Brunner
447 44 Tobias Brunner
--enable-perl-cpan
448 44 Tobias Brunner
449 44 Tobias Brunner
p((. enable build of provided perl CPAN modules (such as that for the [[vici]] protocol) [ _no_ ]. Since version:5.4.0.
450 44 Tobias Brunner
451 44 Tobias Brunner
--enable-perl-cpan-install
452 44 Tobias Brunner
453 44 Tobias Brunner
p((. enable installation of provided CPAN modules [ _no_ ]. Since version:5.4.0.
454 44 Tobias Brunner
455 1 Andreas Steffen
--enable-pkcs11
456 1 Andreas Steffen
457 1 Andreas Steffen
p((. enable the [[SmartcardsIKEv2|PKCS#11 crypto token]] support plugin [ _no_ ].
458 39 Tobias Brunner
459 39 Tobias Brunner
--enable-python-eggs
460 1 Andreas Steffen
461 40 Tobias Brunner
p((. enable build of provided python eggs (such as that for the [[vici]] protocol) [ _no_ ]. Since version:5.3.0.
462 1 Andreas Steffen
463 40 Tobias Brunner
--enable-python-eggs-install
464 40 Tobias Brunner
465 40 Tobias Brunner
p((. enable local installation of provided python eggs [ _no_ ]. Since version:5.3.1.
466 40 Tobias Brunner
467 23 Tobias Brunner
--enable-rdrand
468 23 Tobias Brunner
469 23 Tobias Brunner
p((. enable the Intel RDRAND random generator plugin [ _no_ ].
470 37 Tobias Brunner
471 1 Andreas Steffen
--enable-ruby-gems
472 1 Andreas Steffen
473 40 Tobias Brunner
p((. enable build of provided ruby gems (such as that for the [[vici]] protocol) [ _no_ ]. Since version:5.2.1.
474 40 Tobias Brunner
475 40 Tobias Brunner
--enable-ruby-gems-install
476 40 Tobias Brunner
477 40 Tobias Brunner
p((. enable local installation of provided ruby gems [ _no_ ]. Since version:5.3.1.
478 37 Tobias Brunner
479 54 Tobias Brunner
--enable-save-keys
480 54 Tobias Brunner
481 54 Tobias Brunner
p((. enable development/debugging plugin that saves IKE and ESP keys in Wireshark format. [ _no_ ]. Since version:5.6.2.
482 54 Tobias Brunner
483 42 Tobias Brunner
--enable-sha3
484 42 Tobias Brunner
485 42 Tobias Brunner
p((. enable SHA3_224/SHA3_256/SHA3_384/SHA3_512 software implementation plugin [ _no_ ]. Since version:5.3.4.
486 42 Tobias Brunner
487 1 Andreas Steffen
--enable-smp
488 1 Andreas Steffen
489 1 Andreas Steffen
p((. enable XML configuration and control interface [ _no_ ]. Requires libxml. See [[SMP]].
490 1 Andreas Steffen
491 1 Andreas Steffen
--enable-socket-dynamic
492 1 Andreas Steffen
493 1 Andreas Steffen
p((. enable dynamic socket implementation for charon [ _no_ ].
494 1 Andreas Steffen
495 35 Tobias Brunner
--enable-socket-win
496 35 Tobias Brunner
497 43 Tobias Brunner
p((. enable [[Socket-win|Winsock2 based socket implementation]] for charon [ _no_ ]. Since version:5.2.0.
498 35 Tobias Brunner
499 1 Andreas Steffen
--enable-soup
500 1 Andreas Steffen
501 1 Andreas Steffen
p((. enable soup fetcher plugin to fetch from HTTP URIs. [ _no_ ]. Requires libsoup.
502 16 Tobias Brunner
503 16 Tobias Brunner
--enable-sql
504 16 Tobias Brunner
505 1 Andreas Steffen
p((. enable SQL database configuration backend [ _no_ ]. See [[SQL]].
506 1 Andreas Steffen
507 35 Tobias Brunner
--enable-sqlite
508 35 Tobias Brunner
509 43 Tobias Brunner
p((. enable SQLite database support [ _no_ ]. Requires libsqlite3.
510 35 Tobias Brunner
511 35 Tobias Brunner
--enable-svc
512 35 Tobias Brunner
513 43 Tobias Brunner
p((. enable [[Charon-svc|charon Windows service]] [ _no_ ]. Since version:5.2.0.
514 35 Tobias Brunner
515 37 Tobias Brunner
--enable-systemd
516 37 Tobias Brunner
517 37 Tobias Brunner
p((. enable systemd specific IKE daemon charon-systemd [ _no_ ]. Since version:5.2.1.
518 37 Tobias Brunner
519 24 Tobias Brunner
--enable-systime-fix
520 24 Tobias Brunner
521 43 Tobias Brunner
p((. enable plugin to handle cert lifetimes with invalid system time gracefully [ _no_ ]. See [[SystimeFixPlugin]]. Since version:5.0.3.
522 24 Tobias Brunner
523 16 Tobias Brunner
--enable-test-vectors
524 16 Tobias Brunner
525 1 Andreas Steffen
p((. enable [[CryptoTest|crypto test]] vectors plugin [ _no_ ].
526 16 Tobias Brunner
527 24 Tobias Brunner
--enable-tkm
528 24 Tobias Brunner
529 43 Tobias Brunner
p((. enable _charon-tkm_ an IKEv2 daemon that is backed by a Trusted Key Manager (TKM) [ _no_ ]. More information can be found on http://www.codelabs.ch/tkm/. Since version:5.0.3.
530 24 Tobias Brunner
531 1 Andreas Steffen
--enable-tnccs-11
532 1 Andreas Steffen
533 1 Andreas Steffen
p((. enable TNCCS 1.1 protocol module [ _no_ ]. Requires libxml2.
534 1 Andreas Steffen
535 1 Andreas Steffen
--enable-tnccs-20
536 1 Andreas Steffen
537 8 Andreas Steffen
p((. enable TNCCS 2.0 protocol module [ _no_ ].
538 6 Andreas Steffen
539 1 Andreas Steffen
--enable-tnccs-dynamic
540 1 Andreas Steffen
541 1 Andreas Steffen
p((. enable dynamic TNCCS protocol discovery module [ _no_ ].
542 1 Andreas Steffen
543 19 Tobias Brunner
--enable-tnc-ifmap
544 19 Tobias Brunner
545 19 Tobias Brunner
p((. enable TNC IF-MAP module [ _no_ ].
546 19 Tobias Brunner
547 4 Andreas Steffen
--enable-tnc-imc
548 4 Andreas Steffen
549 4 Andreas Steffen
p((. enable TNC IMC integrity measurement collector module [ _no_ ].
550 4 Andreas Steffen
551 45 Andreas Steffen
--enable-tnc-imv
552 1 Andreas Steffen
553 1 Andreas Steffen
p((. enable TNC IMV integrity measurement verifier module [ _no_ ].
554 45 Andreas Steffen
555 49 Tobias Brunner
--enable-tpm
556 49 Tobias Brunner
557 49 Tobias Brunner
p((. enable plugin to access persistent RSA and ECDSA private keys bound to Trusted Platform Module 2.0 [ _no_ ]. Since version:5.5.2.
558 49 Tobias Brunner
559 1 Andreas Steffen
--enable-tss-trousers
560 45 Andreas Steffen
561 46 Tobias Brunner
p((. enable TPM 1.2 TrouSerS library, requires libtspi library [ _no_ ]. Since version:5.5.0.
562 45 Andreas Steffen
563 45 Andreas Steffen
--enable-tss-tss2
564 45 Andreas Steffen
565 46 Tobias Brunner
p((. enable TPM 2.0 TSS2 library, requires libtss2 library [ _no_ ]. Since version:5.5.0.
566 45 Andreas Steffen
567 1 Andreas Steffen
--enable-uci
568 1 Andreas Steffen
569 1 Andreas Steffen
p((. enable the OpenWRT UCI configuration plugin [ _no_ ].
570 1 Andreas Steffen
571 28 Tobias Brunner
--enable-unbound
572 28 Tobias Brunner
573 28 Tobias Brunner
p((. DNSSEC-enabled resolver plugin based on libunbound [ _no_ ].
574 28 Tobias Brunner
575 1 Andreas Steffen
--enable-unity
576 1 Andreas Steffen
577 43 Tobias Brunner
p((. enable Cisco Unity extension plugin [ _no_ ].
578 1 Andreas Steffen
579 35 Tobias Brunner
--enable-unwind-backtraces
580 35 Tobias Brunner
581 43 Tobias Brunner
p((. use libunwind to create backtraces for memory leaks and segfaults [ _no_ ]. Since version:5.1.0.
582 35 Tobias Brunner
583 18 Tobias Brunner
--enable-whitelist
584 1 Andreas Steffen
585 1 Andreas Steffen
p((. enable peer identity whitelisting plugin [ _no_ ]. 
586 1 Andreas Steffen
587 35 Tobias Brunner
--enable-winhttp
588 35 Tobias Brunner
589 43 Tobias Brunner
p((. enable [[Winhttp|WinHTTP based HTTP/HTTPS fetching plugin]]. [ _no_ ]. Since version:5.2.0.
590 35 Tobias Brunner
591 56 Tobias Brunner
--enable-wolfssl
592 56 Tobias Brunner
593 56 Tobias Brunner
p((. enable the wolfSSL crypto plugin [ _no_ ]. Requires "wolfSSL":https://github.com/wolfSSL/wolfssl. Since version:5.8.0.
594 56 Tobias Brunner
595 56 Tobias Brunner
596 1 Andreas Steffen
--enable-xauth-eap
597 1 Andreas Steffen
598 19 Tobias Brunner
p((. enable XAuth backend using EAP methods to verify password [ _no_ ].
599 24 Tobias Brunner
600 24 Tobias Brunner
--enable-xauth-noauth
601 24 Tobias Brunner
602 43 Tobias Brunner
p((. enable XAuth pseudo-backend that does not actually verify or even request any credentials [ _no_ ]. Since version:5.0.3.
603 1 Andreas Steffen
604 22 Tobias Brunner
--enable-xauth-pam
605 22 Tobias Brunner
606 22 Tobias Brunner
p((. enable [[XAuthPam|XAuth backend using PAM]] to verify passwords [ _no_ ].
607 22 Tobias Brunner
608 1 Andreas Steffen
h2. --disable options
609 19 Tobias Brunner
610 19 Tobias Brunner
*The [[pluginlist|plugin list]] provides more information on specific plugins.*
611 19 Tobias Brunner
612 19 Tobias Brunner
--disable-aes
613 1 Andreas Steffen
614 1 Andreas Steffen
p((. disable default AES software implementation plugin [ _no_ ].
615 1 Andreas Steffen
616 1 Andreas Steffen
--disable-attr
617 1 Andreas Steffen
618 1 Andreas Steffen
p((. disable strongswan.conf based configuration of DNS and WINS server attributes [ _no_ ].
619 1 Andreas Steffen
 This is a plugin for VPN gateways only, serving internal DNS and WINS nameserver information.
620 1 Andreas Steffen
621 1 Andreas Steffen
--disable-charon
622 1 Andreas Steffen
623 20 Tobias Brunner
p((. disable the build of the IKEv1/IKEv2 keying daemon charon [ _no_ ].
624 7 Andreas Steffen
625 21 Tobias Brunner
--disable-cmac
626 21 Tobias Brunner
627 21 Tobias Brunner
p((. disable CMAC crypto implementation plugin [ _no_ ].
628 21 Tobias Brunner
629 7 Andreas Steffen
--disable-constraints
630 7 Andreas Steffen
631 7 Andreas Steffen
p((. disable advanced X.509 constraint checking plugin [ _no_ ].
632 49 Tobias Brunner
633 49 Tobias Brunner
--disable-curve25519
634 49 Tobias Brunner
635 49 Tobias Brunner
p((. disable plugin providing X25519 DH group and Ed25519 public key authentication [ _no_ ]. Since version:5.5.2.
636 1 Andreas Steffen
637 26 Tobias Brunner
--disable-defaults
638 26 Tobias Brunner
639 43 Tobias Brunner
p((. disable all features that are enabled by default [ _no_ ]. Basically it's short for adding all options listed in this section. Since version:5.0.3.
640 26 Tobias Brunner
641 1 Andreas Steffen
--disable-des
642 1 Andreas Steffen
643 1 Andreas Steffen
p((. disable default DES/3DES software implementation plugin [ _no_ ].
644 1 Andreas Steffen
645 1 Andreas Steffen
--disable-dnskey
646 1 Andreas Steffen
647 1 Andreas Steffen
p((. disable DNS RR key decoding plugin [ _no_ ].
648 1 Andreas Steffen
649 58 Tobias Brunner
--disable-drgb
650 58 Tobias Brunner
651 58 Tobias Brunner
p((. disable the NIST Deterministic Random Bit Generator plugin [ _no_ ].
652 58 Tobias Brunner
653 1 Andreas Steffen
--disable-fips-prf
654 1 Andreas Steffen
655 1 Andreas Steffen
p((. disable default FIPS PRF software implementation plugin [ _no_ ].
656 1 Andreas Steffen
657 1 Andreas Steffen
--disable-gmp
658 1 Andreas Steffen
659 1 Andreas Steffen
p((. disable default GNU Multi Precision (libgmp) based public key cryptography implementation plugin [ _no_ ].
660 1 Andreas Steffen
661 1 Andreas Steffen
--disable-hmac
662 1 Andreas Steffen
663 1 Andreas Steffen
p((. disable default HMAC crypto implementation plugin [ _no_ ].
664 1 Andreas Steffen
665 20 Tobias Brunner
--disable-ikev1
666 20 Tobias Brunner
667 20 Tobias Brunner
p((. disable IKEv1 protocol support in charon [ _no_ ].
668 20 Tobias Brunner
669 20 Tobias Brunner
--disable-ikev2
670 20 Tobias Brunner
671 20 Tobias Brunner
p((. disable IKEv2 protocol support in charon [ _no_ ].
672 20 Tobias Brunner
673 1 Andreas Steffen
--disable-kernel-netlink
674 1 Andreas Steffen
675 1 Andreas Steffen
p((. disable default Netlink kernel interface [ _no_ ].
676 1 Andreas Steffen
677 1 Andreas Steffen
--disable-load-warning
678 1 Andreas Steffen
679 20 Tobias Brunner
p((. disable the charon plugin load option warning in starter [ _no_ ]
680 16 Tobias Brunner
681 16 Tobias Brunner
--disable-md5
682 16 Tobias Brunner
683 16 Tobias Brunner
p((. disable default MD5 software implementation plugin [ _no_ ].
684 1 Andreas Steffen
685 20 Tobias Brunner
--disable-nonce
686 20 Tobias Brunner
687 20 Tobias Brunner
p((. disable nonce generation plugin [ _no_ ].
688 20 Tobias Brunner
689 1 Andreas Steffen
--disable-pem
690 1 Andreas Steffen
691 1 Andreas Steffen
p((. disable PEM decoding plugin [ _no_ ].
692 1 Andreas Steffen
693 1 Andreas Steffen
--disable-pgp
694 19 Tobias Brunner
695 1 Andreas Steffen
p((. disable PGP key decoding plugin [ _no_ ].
696 19 Tobias Brunner
697 19 Tobias Brunner
--disable-pkcs1
698 19 Tobias Brunner
699 19 Tobias Brunner
p((. disable PKCS#1 key decoding plugin [ _no_ ].
700 1 Andreas Steffen
701 23 Tobias Brunner
--disable-pkcs7
702 23 Tobias Brunner
703 23 Tobias Brunner
p((. disable PKCS#7 container support plugin [ _no_ ].
704 23 Tobias Brunner
705 1 Andreas Steffen
--disable-pkcs8
706 1 Andreas Steffen
707 1 Andreas Steffen
p((. disable PKCS#8 private key decoding plugin [ _no_ ].
708 1 Andreas Steffen
709 28 Tobias Brunner
--disable-pkcs12
710 28 Tobias Brunner
711 43 Tobias Brunner
p((. disable PKCS#12 container support plugin [ _no_ ]. Since version:5.1.0.
712 1 Andreas Steffen
713 35 Tobias Brunner
--disable-pki
714 35 Tobias Brunner
715 43 Tobias Brunner
p((. disable [[ipsecpki|pki]] certificate utility [ _no_ ]. Separate option since version:5.2.0, was included in _--disable-tools_ before.
716 35 Tobias Brunner
717 1 Andreas Steffen
--disable-pubkey
718 1 Andreas Steffen
719 1 Andreas Steffen
p((. disable default RAW public key support plugin [ _no_ ].
720 1 Andreas Steffen
721 1 Andreas Steffen
--disable-random
722 1 Andreas Steffen
723 1 Andreas Steffen
p((. disable default RNG implementation using the raw /dev/(u)random devices [ _no_ ].
724 1 Andreas Steffen
725 28 Tobias Brunner
--disable-rc2
726 28 Tobias Brunner
727 43 Tobias Brunner
p((. disable RC2 software implementation plugin [ _no_ ]. Since version:5.1.0.
728 1 Andreas Steffen
729 1 Andreas Steffen
--disable-resolve
730 1 Andreas Steffen
731 1 Andreas Steffen
p((. disable writing DNS information received via configuration payload to /etc/resolv.conf [ _no_ ].
732 7 Andreas Steffen
 This is a plugin for VPN clients only.
733 1 Andreas Steffen
734 1 Andreas Steffen
--disable-revocation
735 1 Andreas Steffen
736 1 Andreas Steffen
p((. disable X.509 CRL/OCSP revocation check plugin [ _no_ ].
737 1 Andreas Steffen
738 36 Tobias Brunner
--disable-scepclient
739 36 Tobias Brunner
740 43 Tobias Brunner
p((. disable [[ScepClient|SCEP client]] tool [ _no_ ]. Separate option since version:5.2.0, was included in _--disable-tools_ before.
741 36 Tobias Brunner
742 1 Andreas Steffen
--disable-scripts
743 1 Andreas Steffen
744 1 Andreas Steffen
p((. disable the build of additional utilities (found in directory scripts) [ _no_ ].
745 1 Andreas Steffen
746 1 Andreas Steffen
--disable-sha1
747 1 Andreas Steffen
748 16 Tobias Brunner
p((. disable default SHA-1 software implementation plugin [ _no_ ].
749 19 Tobias Brunner
750 16 Tobias Brunner
--disable-sha2
751 1 Andreas Steffen
752 1 Andreas Steffen
p((. disable default SHA-256/SHA-384/SHA-512 software implementation plugin [ _no_ ].
753 1 Andreas Steffen
754 1 Andreas Steffen
--disable-socket-default
755 1 Andreas Steffen
756 28 Tobias Brunner
p((. disable default socket implementation for charon [ _no_ ].
757 28 Tobias Brunner
758 1 Andreas Steffen
--disable-sshkey
759 1 Andreas Steffen
760 1 Andreas Steffen
p((. disable SSH key decoding plugin [ _no_ ]. Since version:5.1.0.
761 1 Andreas Steffen
762 28 Tobias Brunner
--disable-stroke
763 28 Tobias Brunner
764 43 Tobias Brunner
p((. disable charon's stroke configuration backend [ _no_ ].
765 1 Andreas Steffen
766 44 Tobias Brunner
--disable-swanctl
767 44 Tobias Brunner
768 44 Tobias Brunner
p((. disable [[swanctl]] configuration and control tool [ _no_ ]. Since version:5.2.0, enabled since version:5.4.0.
769 44 Tobias Brunner
770 1 Andreas Steffen
--disable-updown
771 1 Andreas Steffen
772 35 Tobias Brunner
p((. disable updown firewall script plugin [ _no_ ].  
773 44 Tobias Brunner
774 44 Tobias Brunner
--disable-vici
775 44 Tobias Brunner
776 44 Tobias Brunner
p((. disable the [[Vici|Versatile IKE Configuration Interface]] plugin. [ _no_ ]. Since version:5.2.0, enabled since version:5.4.0.
777 1 Andreas Steffen
778 1 Andreas Steffen
--disable-x509
779 1 Andreas Steffen
780 19 Tobias Brunner
p((. disable default X.509 certificate implementation plugin [ _no_ ].
781 16 Tobias Brunner
782 20 Tobias Brunner
--disable-xauth-generic
783 16 Tobias Brunner
784 20 Tobias Brunner
p((. disable generic XAauth backend [ _no_ ].
785 1 Andreas Steffen
786 16 Tobias Brunner
--disable-xcbc
787 16 Tobias Brunner
788 16 Tobias Brunner
p((. disable default XCBC crypto implementation plugin [ _no_ ].
789 1 Andreas Steffen
790 1 Andreas Steffen
h2. --with options
791 1 Andreas Steffen
792 1 Andreas Steffen
--with-capabilities=LIBCAP
793 1 Andreas Steffen
794 1 Andreas Steffen
p((. set capability dropping library. Currently supported values are _libcap_ and _native_ [ _no_ ].
795 22 Tobias Brunner
796 22 Tobias Brunner
--with-charon-udp-port=PORT
797 22 Tobias Brunner
798 22 Tobias Brunner
p((. UDP port used by charon locally. Set to 0 to allocate randomly. [ _500_ ]
799 22 Tobias Brunner
800 22 Tobias Brunner
--with-charon-natt-port=PORT
801 22 Tobias Brunner
802 22 Tobias Brunner
p((. UDP port used by charon locally in case a NAT is detected (must be different from charon-udp-port). Set to 0 to allocate randomly. [ _4500_ ]
803 22 Tobias Brunner
804 59 Tobias Brunner
--with-dbuspolicydir=DIR
805 59 Tobias Brunner
806 59 Tobias Brunner
p((. directory for D-Bus policies (for the [[NetworkManager]] backend _charon-nm_) [ ${dbusdatadir|datarootdir}/dbus-1/system.d ]. Since version:5.8.3.
807 59 Tobias Brunner
808 22 Tobias Brunner
--with-dev-headers=DIR
809 22 Tobias Brunner
810 22 Tobias Brunner
p((. install strongSwan development headers to DIR [ _no_ ].
811 19 Tobias Brunner
812 27 Tobias Brunner
--with-fips-mode=MODE
813 27 Tobias Brunner
814 27 Tobias Brunner
p((. set OpenSSL FIPS mode: disabled (0), enabled (1), Suite B enabled (2) [ _0_ ].
815 51 Tobias Brunner
816 51 Tobias Brunner
--with-libfuzzer=FILE
817 51 Tobias Brunner
818 57 Tobias Brunner
p((. @-fsanitize=fuzzer@ or path to libFuzzer.a, a local driver is used if not specified [ ]. Since version:5.5.3, @-fsanitize=fuzzer@ is supported since version:5.8.1.
819 27 Tobias Brunner
820 1 Andreas Steffen
--with-group=GROUP
821 16 Tobias Brunner
822 19 Tobias Brunner
p((. [[ReducedPrivileges|change group]] of the daemons to GROUP after startup [ _root_ ].
823 1 Andreas Steffen
824 1 Andreas Steffen
--with-imcvdir=IMCVDIR
825 1 Andreas Steffen
826 1 Andreas Steffen
p((. set the installation path of IMC and IMV dynamic libraries [ _IPSECLIBDIR/imcvs_ ].
827 1 Andreas Steffen
828 1 Andreas Steffen
--with-ipsecdir=IPSECDIR
829 16 Tobias Brunner
830 1 Andreas Steffen
p((. installation path for ipsec tools [ _LIBEXECDIR/ipsec_ ].
831 1 Andreas Steffen
832 1 Andreas Steffen
--with-ipseclibdir=IPSECLIBDIR
833 1 Andreas Steffen
834 1 Andreas Steffen
p((. installation path for ipsec libraries (libstrongswan, libhydra, libcharon etc.) [ _LIBDIR/ipsec_ ].
835 1 Andreas Steffen
836 20 Tobias Brunner
--with-ipsec-script=SCRIPTNAME
837 20 Tobias Brunner
838 20 Tobias Brunner
p((. change the name of the ipsec script [ _ipsec_].
839 20 Tobias Brunner
840 1 Andreas Steffen
--with-linux-headers=DIR
841 16 Tobias Brunner
842 1 Andreas Steffen
p((. linux header files to be used [ _../include_ ].
843 1 Andreas Steffen
844 19 Tobias Brunner
--with-mpz_powm_sec=YES|NO
845 19 Tobias Brunner
846 19 Tobias Brunner
p((. use the more side-channel resistant mpz_powm_sec in libgmp, if available [ _yes_ ].
847 19 Tobias Brunner
848 16 Tobias Brunner
--with-nm-ca-dir=NMCADIR
849 16 Tobias Brunner
850 20 Tobias Brunner
p((. directory the NM backend uses to look up trusted root certificates [ _/usr/share/ca-certificates_ ].
851 16 Tobias Brunner
852 1 Andreas Steffen
--with-piddir=DIR
853 1 Andreas Steffen
854 1 Andreas Steffen
p((. path for PID and UNIX socket files [ _/var/run_ ].
855 1 Andreas Steffen
856 1 Andreas Steffen
--with-plugindir=PLUGINDIR
857 1 Andreas Steffen
858 1 Andreas Steffen
p((. installation path for plugins [ _IPSECLIBDIR/plugins_ ].
859 1 Andreas Steffen
860 1 Andreas Steffen
--with-printf-hooks=IMPL
861 1 Andreas Steffen
862 43 Tobias Brunner
p((. force the use of a specific printf()-hook implementation (auto, builtin, glibc, vstr) [ _auto_ ], since version:5.1.3.
863 39 Tobias Brunner
864 39 Tobias Brunner
--with-pythoneggdir=arg
865 39 Tobias Brunner
866 39 Tobias Brunner
p((. path to install python eggs to [ _site-packages directory_ ]. Since version:5.3.0.
867 16 Tobias Brunner
868 1 Andreas Steffen
--with-random-device=DEV
869 1 Andreas Steffen
870 16 Tobias Brunner
p((. set the device for true random data [ _/dev/random_ ].
871 1 Andreas Steffen
872 1 Andreas Steffen
--with-resolv-conf=FILE
873 1 Andreas Steffen
874 19 Tobias Brunner
p((. set the file to store DNS server information [ _SYSCONFDIR/resolv.conf_ ].
875 1 Andreas Steffen
876 1 Andreas Steffen
--with-routing-table=NUM
877 1 Andreas Steffen
878 1 Andreas Steffen
p((. routing table for IPsec source routes (set to 0 to use default routing table) [ _220_ ].
879 1 Andreas Steffen
880 19 Tobias Brunner
--with-routing-table-prio=PRIO
881 19 Tobias Brunner
882 19 Tobias Brunner
p((. priority for IPsec routing table [ _220_ ].
883 37 Tobias Brunner
884 37 Tobias Brunner
--with-rubygemdir=arg
885 37 Tobias Brunner
886 37 Tobias Brunner
p((. path to install ruby gems to [ _gem environment gemdir_ ]. Since version:5.2.1.
887 19 Tobias Brunner
888 19 Tobias Brunner
--with-strongswan-conf=FILE
889 1 Andreas Steffen
890 1 Andreas Steffen
p((. set the strongswan.conf file location [ _SYSCONFDIR/strongswan.conf_ ].
891 35 Tobias Brunner
892 35 Tobias Brunner
--with-systemdsystemunitdir=arg
893 35 Tobias Brunner
894 43 Tobias Brunner
p((. directory for systemd service files [ _$systemdsystemunitdir_default_ ].
895 23 Tobias Brunner
896 23 Tobias Brunner
--with-swanctldir=arg
897 23 Tobias Brunner
898 23 Tobias Brunner
p((. base directory for [[swanctl]] configuration files and credentials [ _SYSCONFDIR/swanctl_ ]. Since version:5.2.0.
899 1 Andreas Steffen
900 1 Andreas Steffen
--with-urandom-device=DEV
901 1 Andreas Steffen
902 1 Andreas Steffen
p((. set the device for pseudo random data [ _/dev/urandom_ ].
903 1 Andreas Steffen
904 1 Andreas Steffen
--with-user=USER
905 1 Andreas Steffen
906 19 Tobias Brunner
p((. [[nonRoot|change user]] of the daemons to USER after startup [ _root_ ].