strongswan.conf 623 B

1234567891011121314151617181920212223242526272829303132333435363738
  1. # /etc/strongswan.conf - strongSwan configuration file
  2. charon-systemd {
  3. load = random nonce x509 openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-tnccs tnc-imc tnc-imv tnccs-20 updown
  4. multiple_authentication = no
  5. syslog {
  6. daemon {
  7. tnc = 2
  8. imc = 2
  9. imv = 2
  10. }
  11. }
  12. plugins {
  13. eap-ttls {
  14. phase2_tnc = yes
  15. }
  16. tnccs-20 {
  17. mutual = yes
  18. }
  19. }
  20. }
  21. libtls {
  22. suites = TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
  23. }
  24. libimcv {
  25. plugins {
  26. imc-test {
  27. command = allow
  28. }
  29. imv-test {
  30. rounds = 1
  31. }
  32. }
  33. }