From 3e7044b45e65471a7f7fe7b002fdc2b10906c6c0 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Fri, 11 Apr 2014 16:30:55 +0200 Subject: Implemented segmented SWID tag attributes on IMV side --- .../hosts/alice/etc/strongswan.conf | 29 ++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 testing/tests/tnc/tnccs-20-pdp-eap/hosts/alice/etc/strongswan.conf (limited to 'testing/tests/tnc/tnccs-20-pdp-eap/hosts/alice/etc/strongswan.conf') diff --git a/testing/tests/tnc/tnccs-20-pdp-eap/hosts/alice/etc/strongswan.conf b/testing/tests/tnc/tnccs-20-pdp-eap/hosts/alice/etc/strongswan.conf new file mode 100644 index 000000000..61bf86fbc --- /dev/null +++ b/testing/tests/tnc/tnccs-20-pdp-eap/hosts/alice/etc/strongswan.conf @@ -0,0 +1,29 @@ +# /etc/strongswan.conf - strongSwan configuration file + +charon { + load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac socket-default kernel-netlink stroke eap-identity eap-ttls eap-md5 eap-tnc tnc-pdp tnc-imv tnc-tnccs tnccs-20 sqlite + plugins { + eap-ttls { + phase2_method = md5 + phase2_piggyback = yes + phase2_tnc = yes + max_message_count = 0 + } + eap-tnc { + protocol = tnccs-2.0 + max_message_count = 20 + } + tnc-pdp { + server = aaa.strongswan.org + radius { + secret = gv6URkSs + } + } + } +} + +libimcv { + debug_level = 3 + database = sqlite:///etc/pts/config.db + policy_script = ipsec imv_policy_manager +} -- cgit v1.2.3