strongswan.conf 615 B

123456789101112131415161718192021222324252627282930313233343536373839
  1. # /etc/strongswan.conf - strongSwan configuration file
  2. charon-systemd {
  3. load = random nonce x509 openssl pem pkcs1 revocation curl vici kernel-netlink socket-default tnc-pdp tnc-tnccs tnc-imc tnc-imv tnccs-20
  4. syslog {
  5. daemon {
  6. tnc = 2
  7. imc = 2
  8. imv = 2
  9. }
  10. }
  11. plugins {
  12. tnc-pdp {
  13. server = sun.strongswan.org
  14. radius {
  15. enable = no
  16. }
  17. }
  18. tnccs-20 {
  19. mutual = yes
  20. }
  21. }
  22. }
  23. libtls {
  24. suites = TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
  25. }
  26. libimcv {
  27. plugins {
  28. imc-test {
  29. command = allow
  30. }
  31. imv-test {
  32. rounds = 1
  33. }
  34. }
  35. }