ike: Optionally allow private algorithms for IKE/CHILD_SAs

[thirdparty/strongswan.git] / conf / options / charon.opt

diff --git a/conf/options/charon.opt b/conf/options/charon.opt
index cc58afda83b6064671401f034cc9e85fa8c4ac00..d9d98ef9c913fee14726a4883e6b9d8b2b70f439 100644 (file)
--- a/conf/options/charon.opt
+++ b/conf/options/charon.opt
@@ -8,6 +8,10 @@ charon {}
        **charon-cmd** instead of **charon**). For many options defaults can be
        defined in the **libstrongswan** section.
 
+charon.accept_private_algs = no
+       Deliberately violate the IKE standard's requirement and allow the use of
+       private algorithm identifiers, even if the peer implementation is unknown.
+
 charon.accept_unencrypted_mainmode_messages = no
        Accept unencrypted ID and HASH payloads in IKEv1 Main Mode.