# /etc/strongswan.conf - strongSwan configuration file charon { load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random x509 revocation hmac xcbc stroke kernel-netlink socket-default eap-identity eap-ttls eap-md5 eap-tnc tnccs-11 tnc-imv updown multiple_authentication=no plugins { eap-ttls { request_peer_auth = yes phase2_piggyback = yes phase2_tnc = yes } } }