# /etc/strongswan.conf - strongSwan configuration file

charon {
  load = random nonce aes sha1 sha2 md5 pem pkcs1 curve25519 gmp x509 curl revocation hmac vici kernel-netlink socket-default

  start-scripts {
    creds = /usr/local/sbin/swanctl --load-creds 
    conns = /usr/local/sbin/swanctl --load-conns
    auths = /usr/local/sbin/swanctl --load-authorities
  }
  plugins {
    revocation {
      enable_ocsp = no
    }
  } 
}