strongswan.conf 3.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127
  1. # /etc/strongswan.conf - strongSwan configuration file
  2. charon-systemd {
  3. load = random nonce aes sha1 sha2 md5 pem pkcs1 gmp hmac x509 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-imc tnc-tnccs tnccs-20 updown
  4. syslog {
  5. daemon {
  6. tnc = 2
  7. imc = 3
  8. }
  9. }
  10. plugins {
  11. eap-ttls {
  12. max_message_count = 0
  13. }
  14. eap-tnc {
  15. max_message_count = 0
  16. }
  17. tnccs-20 {
  18. max_batch_size = 1600
  19. max_message_size = 1568
  20. }
  21. }
  22. }
  23. libtls {
  24. suites = TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
  25. }
  26. libimcv {
  27. os_info {
  28. name = strongPrint OS
  29. version = 1.1
  30. default_password_enabled = no
  31. }
  32. plugins {
  33. imc-hcd {
  34. push_info = no
  35. subtypes {
  36. system {
  37. attributes_natural_language = en
  38. machine_type_model = strongPrint Laser X.509a
  39. vendor_name = ITA-HSR
  40. vendor_smi_code = 36906
  41. pstn_fax_enabled = yes
  42. time_source = 0.ch.pool.ntp.org
  43. user_application_enabled = no
  44. user_application_persistence_enabled = no
  45. firmware {
  46. fw-1 {
  47. name = Firmware ABC
  48. patches = "security patch 2014-05-08\r\nupgrade 2014-08-16\r\nsecurity patch 2015-3-22\r\n"
  49. string_version = 1.0.7
  50. version = 00000001000000000000000700000000
  51. }
  52. fw-2 {
  53. name = Firmware UVW
  54. string_version = 13.8.5
  55. version = 0000000D000000080000000500000000
  56. }
  57. }
  58. resident_application {
  59. resident-app-1 {
  60. name = Resident App XYZ
  61. patches = "xmas patch 2014-12-24\r\nservice patch 2015-05-22\r\n"
  62. string_version = 2.5
  63. version = 00000002000000050000000000000000
  64. }
  65. }
  66. certification_state = 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
  67. configuration_state = f0f1f2f3f4f5f6f7f8f9fafbfcfdfeffe0e1e2e3e4e5e6e7e8e9eaebecedeeefd0d1d2d3d4d5d6d7d8d9dadbdcdddedf
  68. }
  69. console {
  70. attributes_natural_language = ru
  71. }
  72. marker {
  73. attributes_natural_language = fr
  74. }
  75. finisher {
  76. attributes_natural_language = de
  77. }
  78. interface {
  79. attributes_natural_language = en
  80. firmware {
  81. fw-if {
  82. name = Interface Firmware
  83. patches =
  84. string_version = 7.8
  85. version = 00000007000000080000000000000000
  86. }
  87. }
  88. resident_application {
  89. resident-app-if {
  90. name = Resident Interface App
  91. patches = "service patch 2015-02-09\r\n"
  92. string_version = 2.5
  93. version = 00000002000000050000000000000000
  94. }
  95. }
  96. }
  97. scanner {
  98. attributes_natural_language = en
  99. firmware {
  100. fw-scanner {
  101. name = Scanner Firmware
  102. patches = "security patch 2013-08-11\r\nsecurity patch 2015-5-30\r\n"
  103. string_version = 2.5.3
  104. version = 00000002000000050000000300000000
  105. }
  106. }
  107. }
  108. }
  109. }
  110. }
  111. }