package/strongswan/Config.in

   1 comment "strongswan needs a toolchain w/ threads, dynamic library"
   2         depends on BR2_USE_MMU
   3         depends on BR2_TOOLCHAIN_HAS_ATOMIC
   4         depends on !BR2_TOOLCHAIN_HAS_THREADS || BR2_STATIC_LIBS
   5
   6 menuconfig BR2_PACKAGE_STRONGSWAN
   7         bool "strongswan"
   8         depends on BR2_USE_MMU # fork()
   9         depends on BR2_TOOLCHAIN_HAS_THREADS
  10         depends on BR2_TOOLCHAIN_HAS_ATOMIC
  11         depends on !BR2_STATIC_LIBS
  12         help
  13           strongSwan is an OpenSource IPsec implementation for the
  14           Linux operating system. It is based on the discontinued
  15           FreeS/WAN project and the X.509 patch.
  16
  17           The focus is on:
  18            - simplicity of configuration
  19            - strong encryption and authentication methods
  20            - powerful IPsec policies supporting large and complex
  21              VPN networks
  22
  23           strongSwan provide many plugins. Only a few are presented
  24           here.
  25
  26           http://www.strongswan.org/
  27
  28 if BR2_PACKAGE_STRONGSWAN
  29
  30 choice
  31         prompt "Cryptographic backend"
  32         default BR2_PACKAGE_STRONGSWAN_GMP
  33
  34 config BR2_PACKAGE_STRONGSWAN_OPENSSL
  35         bool "OpenSSL"
  36         select BR2_PACKAGE_OPENSSL
  37
  38 config BR2_PACKAGE_STRONGSWAN_GCRYPT
  39         bool "libgcrypt"
  40         depends on BR2_PACKAGE_LIBGPG_ERROR_ARCH_SUPPORTS # libgcrypt
  41         select BR2_PACKAGE_LIBGCRYPT
  42
  43 config BR2_PACKAGE_STRONGSWAN_GMP
  44         bool "GNU MP (libgmp)"
  45         select BR2_PACKAGE_GMP
  46
  47 endchoice
  48
  49 config BR2_PACKAGE_STRONGSWAN_AF_ALG
  50         bool "Enable AF_ALG crypto interface to Linux Crypto API"
  51
  52 config BR2_PACKAGE_STRONGSWAN_CURL
  53         bool "Enable CURL fetcher plugin to fetch files via libcurl"
  54         select BR2_PACKAGE_LIBCURL
  55
  56 config BR2_PACKAGE_STRONGSWAN_CHARON
  57         bool "Enable the IKEv1/IKEv2 keying daemon charon"
  58         default y
  59
  60 if BR2_PACKAGE_STRONGSWAN_CHARON
  61
  62 config BR2_PACKAGE_STRONGSWAN_TNCCS_11
  63         bool "Enable TNCCS 1.1 protocol module"
  64         select BR2_PACKAGE_LIBXML2
  65
  66 config BR2_PACKAGE_STRONGSWAN_TNCCS_20
  67         bool "Enable TNCCS 2.0 protocol module"
  68
  69 config BR2_PACKAGE_STRONGSWAN_TNCCS_DYNAMIC
  70         bool "Enable dynamic TNCCS protocol discovery module"
  71
  72 config BR2_PACKAGE_STRONGSWAN_EAP
  73         bool "Enable EAP protocols"
  74         help
  75           Enable various EAP protocols:
  76             - mschapv2
  77             - tls
  78             - ttls
  79             - peap
  80             - sim
  81             - sim-file
  82             - aka
  83             - aka-3gpp2
  84             - simaka-sql
  85             - simaka-pseudonym
  86             - simaka-reauth
  87             - identity
  88             - md5
  89             - gtc
  90             - tnc
  91             - dynamic
  92             - radius
  93
  94 if BR2_PACKAGE_STRONGSWAN_EAP
  95
  96 config BR2_PACKAGE_STRONGSWAN_EAP_SIM_PCSC
  97         bool "Enable EAP-SIM smart card backend"
  98         depends on !BR2_STATIC_LIBS # pcsc-lite
  99         select BR2_PACKAGE_PCSC_LITE
 100
 101 endif
 102
 103 config BR2_PACKAGE_STRONGSWAN_UNITY
 104         bool "Enables Cisco Unity extension plugin"
 105
 106 config BR2_PACKAGE_STRONGSWAN_STROKE
 107         bool "Enable charons stroke configuration backend"
 108         default y
 109
 110 config BR2_PACKAGE_STRONGSWAN_SQL
 111         bool "Enable SQL database configuration backend"
 112         depends on BR2_PACKAGE_SQLITE || BR2_PACKAGE_MYSQL
 113
 114 endif
 115
 116 config BR2_PACKAGE_STRONGSWAN_PKI
 117         bool "Enable pki certificate utility"
 118         default y
 119
 120 config BR2_PACKAGE_STRONGSWAN_SCEP
 121         bool "Enable SCEP client tool"
 122
 123 config BR2_PACKAGE_STRONGSWAN_SCRIPTS
 124         bool "Enable additional utilities (found in scripts directory)"
 125         default y
 126         depends on BR2_PACKAGE_STRONGSWAN_CHARON
 127
 128 config BR2_PACKAGE_STRONGSWAN_VICI
 129         bool "Enable vici/swanctl"
 130         default y
 131         depends on BR2_PACKAGE_STRONGSWAN_CHARON
 132
 133 endif