charon.replay_window = 32
Size of the AH/ESP replay window, in packets.
+charon.reqid_base = 1
+ Value of the first reqid to be automatically assigned to a CHILD_SA.
+
charon.retransmit_base = 1.8
Base to use for calculating exponential back off, see IKEv2 RETRANSMISSION
in **strongswan.conf**(5).
charon.routing_table_prio
Priority of the routing table.
-charon.reqid_base = 1
- Value of the first reqid to be automatically assigned to a CHILD_SA.
-
charon.rsa_pss = no
Whether to use RSA with PSS padding instead of PKCS#1 padding by default.
If not configured, **resolvconf**(8) will be used if found at the default
location. Otherwise, the file in _charon.plugins.resolve.file_ will be
- modfied directly.
+ modified directly.
* Main function wrapper for threads.
*
* Excluded from AddressSanitizer because some newer versions have an issue that
- * causes an "AddressSanitizer CHECK failed" error for cancelled threads.
+ * causes an "AddressSanitizer CHECK failed" error for canceled threads.
*/
ADDRESS_SANITIZER_EXCLUDE
static void *thread_main(private_thread_t *this)
.BR swanctl (8)
tool to load configurations and credentials into the strongSwan IKE daemon.
-For a description of the basic file syntax, including numer/time formats, or how
+For a description of the basic file syntax, including number/time formats, or how
to reference sections or split the configuration in multiple files by including
other files, refer to
.BR strongswan.conf (5).
config, see there for details.
The special value _%unique_ allocates a unique interface ID per IKE_SA,
- which is inherited by all its CHILD_SAs (unless overriden there), beyond
+ which is inherited by all its CHILD_SAs (unless overridden there), beyond
that the value _%unique-dir_ assigns a different unique interface ID for
each direction (in/out).
config, see there for details.
The special value _%unique_ allocates a unique interface ID per IKE_SA,
- which is inherited by all its CHILD_SAs (unless overriden there), beyond
+ which is inherited by all its CHILD_SAs (unless overridden there), beyond
that the value _%unique-dir_ assigns a different unique interface ID for
each direction (in/out).
The roadwarriors <b>carol</b> and <b>dave</b> set up a connection to gateway <b>moon</b>.
-At the outset the gateway does not send an AUTH payload thus signalling
+At the outset the gateway does not send an AUTH payload thus signaling
a mutual <b>EAP-only</b> authentication.
<p/>
Next the clients use the GSM <i>Subscriber Identity Module</i> (<b>EAP-SIM</b>)
The roadwarriors <b>carol</b> and <b>dave</b> set up a connection to gateway <b>moon</b>.
-At the outset the gateway does not send an AUTH payload thus signalling
+At the outset the gateway does not send an AUTH payload thus signaling
a mutual <b>EAP-only</b> authentication.
<p/>
Next the clients use the GSM <i>Subscriber Identity Module</i> (<b>EAP-SIM</b>)