| 1234567891011121314151617181920212223242526272829303132333435363738394041 | # /etc/strongswan.conf - strongSwan configuration filecharon-systemd {  load = random nonce openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnc-imv tnc-tnccs tnccs-20 updown sqlite  multiple_authentication = no  syslog {    daemon {      tnc = 3      imv = 3      pts = 3    }  }  plugins {    eap-ttls {      phase2_method = md5      phase2_piggyback = yes      phase2_tnc = yes    }  }}libtls {  suites = TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256}libimcv {  database = sqlite:///etc/db.d/config.db  policy_script = /usr/local/libexec/ipsec/imv_policy_manager  plugins {    imv-attestation {      hash_algorithm = sha1    }  }}attest {  load = random nonce openssl sqlite  database = sqlite:///etc/db.d/config.db}
 |