Commit 116f36ba57 for strongswan.org
commit 116f36ba57eea03937b6aee02a184c84dcd37ef0
Author: Tobias Brunner <tobias@strongswan.org>
Date: Fri Feb 20 11:53:15 2026 +0100
vici: Document attributes for additional KE methods in list-sa event
diff --git a/src/libcharon/plugins/vici/README.md b/src/libcharon/plugins/vici/README.md
index 38f7f9b015..01c3f858ca 100644
--- a/src/libcharon/plugins/vici/README.md
+++ b/src/libcharon/plugins/vici/README.md
@@ -776,12 +776,15 @@ command.
nat-any = <yes, if any endpoint is behind a NAT (also if faked)>
if-id-in = <hex encoded default inbound XFRM interface ID>
if-id-out = <hex encoded default outbound XFRM interface ID>
- encr-alg = <IKE encryption algorithm string>
+ encr-alg = <IKE encryption algorithm name>
encr-keysize = <key size for encr-alg, if applicable>
- integ-alg = <IKE integrity algorithm string>
+ integ-alg = <IKE integrity algorithm name>
integ-keysize = <key size for encr-alg, if applicable>
- prf-alg = <IKE pseudo random function string>
- dh-group = <IKE Diffie-Hellman group string>
+ prf-alg = <IKE pseudo random function name>
+ dh-group = <IKE key exchange method name>
+ ake1 = <first additional IKE key exchange method name, if any>
+ ...
+ ake7 = <seventh additional IKE key exchange method name, if any>
established = <seconds the IKE_SA has been established>
rekey-time = <seconds before IKE_SA gets rekeyed>
reauth-time = <seconds before IKE_SA gets re-authenticated>
@@ -827,7 +830,10 @@ command.
integ-alg = <ESP or AH integrity algorithm name, if any>
integ-keysize = <ESP or AH integrity key size, if applicable>
prf-alg = <CHILD_SA pseudo random function name>
- dh-group = <CHILD_SA PFS rekeying DH group name, if any>
+ dh-group = <CHILD_SA key exchange method name, if any>
+ ake1 = <first additional CHILD_SA key exchange method name, if any>
+ ...
+ ake7 = <seventh additional CHILD_SA key exchange method name, if any>
esn = <1 if using extended sequence numbers>
bytes-in = <number of input bytes processed>
packets-in = <number of input packets processed>