# /etc/strongswan.conf - strongSwan configuration file

libtls {
  suites = TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
}

libimcv {
  plugins {
    imc-swima {
      swid_database = sqlite:///etc/db.d/collector.db
    }
  }
}

pt-tls-client {
  load = revocation constraints pem openssl curl sqlite nonce tnc-tnccs tnc-imc tnccs-20
}

sw-collector {
  database = sqlite:///etc/db.d/collector.db
  history = /var/log/apt/history.log
  rest_api {
    uri = http://admin-user:strongSwan@tnc.strongswan.org/api/
  }
}