package/strongswan/Config.in

   1 comment "strongswan needs a toolchain w/ threads, dynamic library"
   2         depends on BR2_USE_MMU
   3         depends on BR2_TOOLCHAIN_HAS_ATOMIC
   4         depends on !BR2_TOOLCHAIN_HAS_THREADS || BR2_STATIC_LIBS
   5
   6 menuconfig BR2_PACKAGE_STRONGSWAN
   7         bool "strongswan"
   8         depends on BR2_USE_MMU # fork()
   9         depends on BR2_TOOLCHAIN_HAS_THREADS
  10         depends on BR2_TOOLCHAIN_HAS_ATOMIC
  11         depends on !BR2_STATIC_LIBS
  12         help
  13           strongSwan is an OpenSource IPsec implementation for the
  14           Linux operating system. It is based on the discontinued
  15           FreeS/WAN project and the X.509 patch.
  16
  17           The focus is on:
  18              - simplicity of configuration
  19              - strong encryption and authentication methods
  20              - powerful IPsec policies supporting large and complex VPN networks
  21
  22           strongSwan provide many plugins. Only a few are presented here.
  23
  24           http://www.strongswan.org/
  25
  26 if BR2_PACKAGE_STRONGSWAN
  27
  28 choice
  29         prompt "Cryptographic backend"
  30         default BR2_PACKAGE_STRONGSWAN_GMP
  31
  32 config BR2_PACKAGE_STRONGSWAN_OPENSSL
  33         bool "OpenSSL"
  34         select BR2_PACKAGE_OPENSSL
  35
  36 config BR2_PACKAGE_STRONGSWAN_GCRYPT
  37         bool "libgcrypt"
  38         depends on BR2_PACKAGE_LIBGPG_ERROR_ARCH_SUPPORTS # libgcrypt
  39         select BR2_PACKAGE_LIBGCRYPT
  40
  41 config BR2_PACKAGE_STRONGSWAN_GMP
  42         bool "GNU MP (libgmp)"
  43         select BR2_PACKAGE_GMP
  44
  45 endchoice
  46
  47 config BR2_PACKAGE_STRONGSWAN_AF_ALG
  48         bool "Enable AF_ALG crypto interface to Linux Crypto API"
  49
  50 config BR2_PACKAGE_STRONGSWAN_CURL
  51         bool "Enable CURL fetcher plugin to fetch files via libcurl"
  52         select BR2_PACKAGE_LIBCURL
  53
  54 config BR2_PACKAGE_STRONGSWAN_CHARON
  55         bool "Enable the IKEv1/IKEv2 keying daemon charon"
  56         default y
  57
  58 if BR2_PACKAGE_STRONGSWAN_CHARON
  59
  60 config BR2_PACKAGE_STRONGSWAN_TNCCS_11
  61         bool "Enable TNCCS 1.1 protocol module"
  62         select BR2_PACKAGE_LIBXML2
  63
  64 config BR2_PACKAGE_STRONGSWAN_TNCCS_20
  65         bool "Enable TNCCS 2.0 protocol module"
  66
  67 config BR2_PACKAGE_STRONGSWAN_TNCCS_DYNAMIC
  68         bool "Enable dynamic TNCCS protocol discovery module"
  69
  70 config BR2_PACKAGE_STRONGSWAN_EAP
  71         bool "Enable EAP protocols"
  72         help
  73           Enable various EAP protocols:
  74             - mschapv2
  75             - tls
  76             - ttls
  77             - peap
  78             - sim
  79             - sim-file
  80             - aka
  81             - aka-3gpp2
  82             - simaka-sql
  83             - simaka-pseudonym
  84             - simaka-reauth
  85             - identity
  86             - md5
  87             - gtc
  88             - tnc
  89             - dynamic
  90             - radius
  91
  92 if BR2_PACKAGE_STRONGSWAN_EAP
  93
  94 config BR2_PACKAGE_STRONGSWAN_EAP_SIM_PCSC
  95         bool "Enable EAP-SIM smart card backend"
  96         depends on !BR2_STATIC_LIBS # pcsc-lite
  97         select BR2_PACKAGE_PCSC_LITE
  98
  99 endif
 100
 101 config BR2_PACKAGE_STRONGSWAN_UNITY
 102         bool "Enables Cisco Unity extension plugin"
 103
 104 config BR2_PACKAGE_STRONGSWAN_STROKE
 105         bool "Enable charons stroke configuration backend"
 106         default y
 107
 108 config BR2_PACKAGE_STRONGSWAN_SQL
 109         bool "Enable SQL database configuration backend"
 110         depends on BR2_PACKAGE_SQLITE || BR2_PACKAGE_MYSQL
 111
 112 endif
 113
 114 config BR2_PACKAGE_STRONGSWAN_PKI
 115         bool "Enable pki certificate utility"
 116         default y
 117
 118 config BR2_PACKAGE_STRONGSWAN_SCEP
 119         bool "Enable SCEP client tool"
 120
 121 config BR2_PACKAGE_STRONGSWAN_SCRIPTS
 122         bool "Enable additional utilities (found in scripts directory)"
 123         depends on BR2_PACKAGE_STRONGSWAN_CHARON
 124         default y
 125
 126 config BR2_PACKAGE_STRONGSWAN_VICI
 127         bool "Enable vici/swanctl"
 128         depends on BR2_PACKAGE_STRONGSWAN_CHARON
 129         default y
 130
 131 endif