strongswan.conf 500 B

1234567891011121314151617181920212223
  1. # /etc/strongswan.conf - strongSwan configuration file
  2. swanctl {
  3. load = pem pkcs1 x509 revocation constraints pubkey openssl random
  4. }
  5. charon-systemd {
  6. load = random nonce aes sha1 sha2 pem pkcs1 curve25519 gmp x509 curl revocation hmac vici kernel-libipsec kernel-netlink socket-default updown
  7. multiple_authentication = no
  8. plugins {
  9. kernel-netlink {
  10. fwmark = !0x42
  11. }
  12. socket-default {
  13. fwmark = 0x42
  14. }
  15. kernel-libipsec {
  16. allow_peer_ts = yes
  17. }
  18. }
  19. }