strongswan.conf 8.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168
  1. # /etc/strongswan.conf - strongSwan configuration file
  2. charon-systemd {
  3. load = random nonce aes sha1 sha2 md5 pem pkcs1 gmp hmac x509 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown
  4. syslog {
  5. daemon {
  6. tnc = 2
  7. imc = 3
  8. }
  9. }
  10. plugins {
  11. eap-ttls {
  12. max_message_count = 0
  13. }
  14. eap-tnc {
  15. max_message_count = 0
  16. }
  17. tnccs-20 {
  18. max_batch_size = 1600
  19. max_message_size = 1568
  20. }
  21. }
  22. }
  23. libtls {
  24. suites = TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
  25. }
  26. libimcv {
  27. os_info {
  28. name = strongPrint OS
  29. version = 1.0
  30. default_password_enabled = yes
  31. }
  32. plugins {
  33. imc-hcd {
  34. push_info = no
  35. subtypes {
  36. system {
  37. attributes_natural_language = en
  38. machine_type_model = strongPrint Laser X.509a
  39. vendor_name = ITA-HSR
  40. vendor_smi_code = 36906
  41. pstn_fax_enabled = yes
  42. time_source = 0.ch.pool.ntp.org
  43. user_application_enabled = yes
  44. user_application_persistence_enabled = no
  45. firmware {
  46. fw-1 {
  47. name = Firmware ABC for ARMv6 32bit strongPrint OS 1.0
  48. patches = "security patch CVE-2014-1630 2014-05-08\r\nmajor upgrade for ABC (European version 1.0-en) 2014-08-16\r\nsecurity patch CVE-2015-1111 2015-03-22\r\nsecurity patch CVE-2015-3324 2015-06-01"
  49. string_version = 1.0.7
  50. version = 00000001000000000000000700000000
  51. }
  52. fw-2 {
  53. name = Firmware UVW for ARMv6 32 bit strongPrint OS 1.0
  54. patches = "security patch CVE-2014-1288 2014-01-01\r\nsecurity patch CVE-2014-1492 2014-02-01\r\nsecurity patch CVE-2014-1622 2014-05-01\r\nsecurity patch CVE-2014-2775 2014-07-01\r\n\security patch CVE-2014-4453 2014-08-01\r\nsecurity patch CVE-2014-6108 2014-11-01\r\nsecurity patch CVE-2015-0555 2015-01-01\r\nsecurity patch CVE-2015-4319 2015-07-01\r\n"
  55. string_version = 13.8.5
  56. version = 0000000D000000080000000500000000
  57. }
  58. fw-3 {
  59. name = Firmware XYZ for ARMv6 32 bit strongPrint OS 1.0
  60. patches = "spring 2015 service pack for professional printing services 10.1.2a\r\n"
  61. string_version = 10.1.2
  62. version = 0000000A000000010000000200000000
  63. }
  64. }
  65. resident_application {
  66. resident-app-1 {
  67. name = Resident App XYZ
  68. patches = "xmas patch 2014-12-24\r\nservice patch for App XYZ 2015-05-22\r\n"
  69. string_version = 2.5
  70. version = 00000002000000050000000000000000
  71. }
  72. }
  73. user_application {
  74. user-app-1 {
  75. name = My Java Photo App
  76. patches =
  77. string_version = 5.2.3.8.1
  78. version = 00000005000000020000000300080001
  79. }
  80. user-app-2 {
  81. name = Print Your Dinosaur!
  82. patches =
  83. string_version = 1.0
  84. version = 00000001000000000000000000000000
  85. }
  86. user-app-3 {
  87. name = Label Everything App
  88. patches =
  89. string_version = 7.5.8.2.3
  90. version = 00000007000000050000000800020003
  91. }
  92. user-app-4 {
  93. name = Happy Millionaire - Forge Your Own Currency (CHF, USD, EUR, AUD)
  94. string_version = 0.9.7.8
  95. version = 00000000000000090000000700080000
  96. }
  97. }
  98. certification_state = 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
  99. configuration_state = f0f1f2f3f4f5f6f7f8f9fafbfcfdfeffe0e1e2e3e4e5e6e7e8e9eaebecedeeefd0d1d2d3d4d5d6d7d8d9dadbdcdddedf
  100. }
  101. console {
  102. attributes_natural_language = ru
  103. }
  104. marker {
  105. attributes_natural_language = fr
  106. }
  107. finisher {
  108. attributes_natural_language = de
  109. }
  110. interface {
  111. attributes_natural_language = en
  112. firmware {
  113. fw-if {
  114. name = Interface Firmware
  115. patches =
  116. string_version = 7.8
  117. version = 00000007000000080000000000000000
  118. }
  119. }
  120. resident_application {
  121. resident-app-if {
  122. name = Resident Interface App
  123. patches = "service patch 2015-02-09\r\n"
  124. string_version = 2.5
  125. version = 00000002000000050000000000000000
  126. }
  127. }
  128. }
  129. scanner {
  130. attributes_natural_language = en
  131. firmware {
  132. fw-scanner {
  133. name = Scanner Firmware
  134. patches = "security patch 2013-08-11\r\nsecurity patch 2015-5-30\r\n"
  135. string_version = 2.5.3
  136. version = 00000002000000050000000300000000
  137. }
  138. }
  139. user_application {
  140. user-app-scanner {
  141. name = EasyScan
  142. patches =
  143. string_version = 2.2.3.5.7
  144. version = 00000002000000020000000300050007
  145. }
  146. }
  147. }
  148. }
  149. }
  150. }
  151. }