strongswan.conf 680 B

123456789101112131415161718192021222324252627282930313233343536373839
  1. # /etc/strongswan.conf - strongSwan configuration file
  2. charon-systemd {
  3. load = random nonce x509 openssl pem pkcs1 revocation curl vici kernel-netlink socket-default eap-identity eap-ttls eap-tnc tnc-tnccs tnc-imc tnc-imv tnccs-20 updown
  4. multiple_authentication = no
  5. syslog {
  6. daemon {
  7. tnc = 2
  8. imc = 2
  9. imv = 2
  10. }
  11. }
  12. plugins {
  13. eap-ttls {
  14. request_peer_auth = yes
  15. phase2_piggyback = yes
  16. phase2_tnc =yes
  17. }
  18. tnccs-20 {
  19. mutual = yes
  20. }
  21. }
  22. }
  23. libtls {
  24. suites = TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
  25. }
  26. libimcv {
  27. plugins {
  28. imc-test {
  29. command = allow
  30. }
  31. imv-test {
  32. rounds = 1
  33. }
  34. }
  35. }